Skip to main content

Okta Integration

How to Integrate Okta with Hook

We leverage Okta's OAuth flow for enabling SSO. Follow the instructions below to set up this integration in Hook.

1. Create an OAuth 2.0 app in Okta

  1. Follow the instructions here to create an OAuth 2.0 app in Okta. The scopes we require are:

    • openid - Required for OpenID Connect authentication

    • email - Grants access to the user's email address

    • profile - Grants access to the user's basic profile information

    • okta.emailDomains.read - Read email domain configurations

    • okta.users.read - Read user data from Okta's management API

      Required Okta scopes for integrating with Hook

  2. When setting up the OAuth app in Okta, set:

    1. Initiate login URI: https://app.hook.co (or https://app.us.hook.co/ for the US Hook instance)

Note: If you are using the US instance of Hook and logging in at app.us.hook.co
then add https://hook-us.us.auth0.com/login/callback as the redirect login URI for the application.

2. Update application settings in Okta

  1. Go to ApplicationsYour OIDC AppGeneral in Okta.

  2. Under Login redirect URIs, make sure you have exactly the same callback URL that Auth0 is using. It must match including https:// compared to http://, trailing slashes, query parameters, etc. It will be in a similar format to https://{customer_name}.okta.com

  3. Under Allowed grant types, confirm Authorization Code (and PKCE if you’re using it) are enabled.

Ensure your application settings appear as above in Okta

3. Share Okta credentials with Hook

Hook requires the following: Client ID, Client Secret and Okta Domain. Speak to your Technical Implementation Consultant about sharing these credentials securely via a method such as 1Password or LastPass.

Alternatively if you have a Google account you can input the credentials directly in Hook:

  1. Navigate to https://app.hook.co/configuration/integrations/okta-sso and sign-in with your Google account.

  2. Input the Client ID, Client Secret and Okta Domain in the form provided.

  3. Click Submit credentials.

Fill out Client Id, Client Secret and Okta Domain in the form

4. Once complete please inform the Hook team. You will be redirected to the following screen once the connection has been established.

Note: once Okta is configured you will no longer be able to login with your Google account.

Did this answer your question?