Folllow these instructions to allow your users to login to your Buildstash workspace using Okta.<blockquote>This feature is available on the Ultra and Enterprise plans.If you would like it activated on your workspace please contact support.<a href="https://docs.buildstash.com/integrations/sso/jumpcloud#create-sso-application-in-jumpcloud" target="_blank" rel="noopener noreferrer nofollow" class="cursor-pointer box-border border-b hover:border-b-[2px] transition-all duration-75 " style="text-decoration: none; border-color: var(--portal-accent-color);">​</a></blockquote><h2>Create SSO app integration in Okta</h2><ol class="steps-list"><li>Create new app integration In your Okta Admin Console for your organization, navigate to Applications, and select "Create app integration". In the dialog select "OIDC - OpenID Connect", and "Web Application". <img src="https://uploads.productlane.com/4621382d8ad797675d9b541d6007a249.png"> </li><li>Enter key integration details There are some key details to enter when setting up the integration. The "Sign-in redirect URL" must be entered exactly match the "redirect URI" for your workspace. You can find this in the "Enable identity provider" dialog in Buildstash, covered below. The format will be: https://WORKSPACE_SUBDOMAIN.buildstash.com/auth/okta/callback <img src="https://uploads.productlane.com/9bb4475c840cbea2652f4c8f3329614d.png">You must also setup access as preferred under Assignments. <img src="https://uploads.productlane.com/5493e296737bd1c98f003599ddad636c.png"> </li><li>Note client ID and secret Once the application is created, you'll find the Client ID and Client Secret you'll need to input when setting up in Buildstash later. <img src="https://uploads.productlane.com/5d98e8950e988dd74697ebd006d413b4.png"> </li><li>Setup access policy on Authorization Server If you've not already setup an access policy on the Authorization Server you wish to use you'll need to do this. Navigate to Security &gt; API &gt; Authorization Servers, then select to edit the Authorization Server you wish to use - this will be the "default" auth server if you've not setup more. <img src="https://uploads.productlane.com/17d808333b3a2e3352a2c8942fe8d760.png">When editing the Authorization Server, go to the "Access Policies" tab, and create a new policy (if you don't already have one), then create a rule.<img src="https://uploads.productlane.com/d35076424222339eda63165b24182659.png">This is an example of a rule which will provide the necessary access for Buildstash to authenticate. </li></ol><h2>Configure SSO in Buildstash</h2><ol class="steps-list"><li>Enable SSO provider Go to your workspace settings, and under “Enterprise SSO”, select “Enable provider”. <img src="https://uploads.productlane.com/dff758963fd46c9419d12691dae4cfd2.png"> </li><li>Input provider credentials Input the client ID and secret you copied noted from the previous step. Your redirect URI to enter in Okta is also shown here. You'll also need to provide the subdomain for your organization in Okta, and the name of your Authorization Server. You can find both the values needed in step 4 in the previous section. <img src="https://uploads.productlane.com/d0cafcbeca562045cb8e729072691f9c.png"> </li><li>Confirm correctly configured Once details are entered and confirmed you’ll see Okta connected.<img src="https://uploads.productlane.com/f9cd656a03cf2088654b2d9e4f6b1ffb.png">Select “Manage” to update credentials in future, disable non-SSO login, or remove Okta as a login provider in future. <img src="https://uploads.productlane.com/3e7383d5273f950dfdbc385490f968fd.png">You can optionally require users login via this SSO provider to access your workspace, and there's an option to auto-add users who login via this provider to your workspace if they're not already a member. </li><li>Login with SSO You can now navigate to the login page on your workspace custom subdomain, and the Okta SSO option will be presented.</li></ol>

Integrations

Okta

Guide

Get started

GitHub Actions

Azure DevOps Pipelines

fastlane

AWS S3

JumpCloud

Microsoft Entra

Auth0

Docs

Buildstash