Skip to main content

Okta Integration

How to Integrate Okta with Hook

We leverage Okta's OAuth flow for enabling SSO. Follow the instructions below to set up this integration in Hook.

1. Create an OAuth 2.0 app in Okta

  1. Follow the instructions here to create an OAuth 2.0 app in Okta. The scopes we require are:

    • openid - Required for OpenID Connect authentication

    • email - Grants access to the user's email address

    • profile - Grants access to the user's basic profile information

    • okta.emailDomains.read - Read email domain configurations

    • okta.users.read - Read user data from Okta's management API

      Required Okta scopes for integrating with Hook

  2. When setting up the OAuth app in Okta, set:

    1. Initiate login URI: https://app.hook.co (or https://app.us.hook.co/ for the US Hook instance)

Note: If you are using the US instance of Hook and logging in at app.us.hook.co
then add https://hook-us.us.auth0.com/login/callback as the redirect login URI for the application.

2. Update application settings in Okta

  1. Go to ApplicationsYour OIDC AppGeneral in Okta.

  2. Under Login redirect URIs, make sure you have exactly the same callback URL that Auth0 is using. It must match including https:// compared to http://, trailing slashes, query parameters, etc. It will be in a similar format to https://{customer_name}.okta.com

  3. Under Allowed grant types, confirm Authorization Code (and PKCE if you’re using it) are enabled.

Ensure your application settings appear as above in Okta

3. Share Okta credentials with Hook

  1. Go to https://app.hook.co/configuration/integrations/okta-sso. You should be able to login using your Google account, until Okta SSO is configured. Otherwise speak to your Technical Implementation Consultant about sharing these credentials via 1Password.

  2. Input the Client ID, Client Secret and Okta Domain in the form provided.

  3. Click Submit credentials.

Fill out Client Id, Client Secret and Okta Domain in the form

4. Once complete please inform the Hook team. You will be redirected to the following screen once the connection has been established.

Did this answer your question?