Skip to main content
Okta is an identity provider (IdP) you can connect to Sevalla with SAML single sign-on (SSO). You create a SAML 2.0 app integration in Okta with the values Sevalla shows, then paste Okta’s values into Sevalla. For how SSO works in Sevalla, see Single sign-on.

​
Before you begin

  • You’re a company owner or admin in Sevalla.
  • You can create app integrations in the Okta Admin Console.
  • Your Sevalla account uses an email address on your company’s domain, and you have an Okta user with the same address. The setup test signs you in with it.

​
Values to copy

From Sevalla’s Create SAML app step into Okta: From Okta’s SAML setup instructions into Sevalla’s Sevalla setup step:

​
Start the setup in Sevalla

1

Open the wizard

In the sidebar, under Company, click Single sign-on. On the Single sign-on card, click Enable (or Continue setup).
2

Go to the values

Click Continue to reach Create SAML app. Keep this tab open: you’ll copy its values into Okta.

​
Create the SAML app in Okta

1

Start a SAML integration

In the Okta Admin Console, go to Applications > Applications and click Create App Integration. Select SAML 2.0, then click Next.
2

Name the app

In App name, enter Sevalla. Optionally, upload the Sevalla logo in App logo. Click Next.
3

Configure SAML

Fill in these fields and leave the others as they are:
  • Single sign-on URL: https://my.kinsta.com/saml/receive. Keep Use this for Recipient URL and Destination URL selected.
  • Audience URI (SP Entity ID): https://my.kinsta.com/saml
  • Name ID format: EmailAddress
  • Application username: Email
  • Update application username on: Create and update
4

Add the attribute statements

Under Attribute Statements, add three statements (click Add Another for each new row):Click Next.
5

Finish

On the Feedback step, say that it’s an internal app you created, then click Finish.
Okta's Configure SAML step with the single sign-on URL, audience URI, EmailAddress name ID format and Email application username filled in
Signing in from the Okta dashboard isn’t supported, so you can hide the app’s icon from your users in the app’s general settings.

​
Give people access to the app

Only people assigned to the app can sign in to Sevalla with Okta.
1

Open the assignments

In Applications > Applications, click the Sevalla app, then click the Assignments tab.
2

Assign people or groups

Click Assign, then Assign to People or Assign to Groups. Click Assign next to each person or group, then click Done. Include yourself, so you can run the test.

​
Add the Okta details to Sevalla

1

Open Okta's setup instructions

In the Sevalla app in Okta, click the Sign On tab, then click View SAML setup instructions.
2

Verify your email domain in Sevalla

In the Sevalla tab, click Continue to reach Sevalla setup. Under Email domain, add and verify your domain. See Verify your email domain.
3

Paste Okta's values

Under Set up Sevalla SAML, paste:
  • SSO URL: Okta’s Identity Provider Single Sign-On URL
  • Entity ID: Okta’s Identity Provider Issuer
  • Public certificate: Okta’s X.509 Certificate, including the BEGIN CERTIFICATE and END CERTIFICATE lines
Click Continue.

​
Test and set SSO live

On Test and finish, click Test authentication and sign in to Okta. When Sevalla shows Authentication test was successful., click Save and set SSO live. If the test fails, see Troubleshoot SSO sign-in. Next, you can make SSO mandatory and turn on just-in-time provisioning.

​
Change the session length

Okta’s session settings decide how long an SSO session lasts. If Okta doesn’t send a session end time, Sevalla’s SSO session lasts 24 hours. To change it, see Okta’s article How to adjust session lifetime and idle value for users.