Configure Okta IdP for ThoughtSpot

Configure Okta as the identity provider (IdP) for ThoughtSpot.

1. Sign in to ThoughtSpot as an admin.
2. Go to Admin SettingsAuthentication and click Single Sign On.

3. Select OIDC IdP or click Add Identity ProviderOIDC IdP.

4. In the OIDC Identity Provider Connection Details section, enter the Connection Name.

5. Enter the Client ID and Client Secret that you obtained from the previous step.

6. Enter the following OIDC endpoints that you obtained from the metadata section from previous steps:

   • Authorization Endpoint

   • Token Endpoint

   • Issuer

   • User Info Endpoint

   • Jwks Endpoint

7. To automatically create user accounts upon the first login, enable the Just-in-Time (JIT) flow toggle and click Continue.

8. In the Map attributes section, verify that attributes from the identity provider's OIDC assertion are accurately mapped to the corresponding attributes in ThoughtSpot.

9. Click Save and continue.

10. In the Add ThoughtSpot to your Identity Provider section, click Enable to finalize the integration.

Next step

Verify SP-initiated Single Sign-On (SSO)