# Okta SSO and SCIM

> Circleback supports Okta single sign-on over SAML and SCIM provisioning, so Okta controls who can access your workspace.

- Canonical HTML: https://circleback.ai/integrations/okta
- Plan: Enterprise
- Setup guide: https://circleback.ai/docs/support/security/single-sign-on/set-up-sso-with-okta
- Integrations directory: https://circleback.ai/integrations
- Language: en-US

## How it works

1. In Circleback, go to Settings → General, select Connect under Single sign-on and choose SAML.
2. In Okta, create a SAML 2.0 app integration named Circleback and copy in the ACS URL and Entity ID.
3. Enter your Okta details in Circleback, then choose Okta as the directory provider to set up SCIM.

## Frequently asked questions

### Can we require SSO?

Yes. Workspace admins can enforce SSO, which turns off every other way to log in.

### What does SCIM do?

Okta manages accounts for you. People who join your company get access automatically, and people who leave are deactivated in your workspace.

### Which plan includes SSO?

Enterprise, which includes single sign-on with SAML or OIDC and SCIM provisioning.