# Okta (https://riska.io/apps/okta)

_Available · Built by Riska · Official_

Sign in with Okta and keep access in your directory

Point Riska at Okta for single sign-on and directory sync. People sign in with the account they already have, and they join and leave Riska when your directory says so.

When someone leaves, their access and their team memberships go with them, with no ticket to Riska.

## How it works

- **No Riska passwords**: Everyone signs in through Okta.
- **Access follows the directory**: People are added and removed in Riska as they are in Okta.
- **Clean offboarding**: Removing someone takes their team memberships with them.

## Configure

1. **Open workspace settings** An admin opens Settings, then Workspace, then General.
2. **Set up single sign-on** Start the single sign-on setup and follow the guided steps for Okta.
3. **Connect your directory** Turn on directory sync so people join and leave Riska with your directory.
4. **Verify your domain** Add the DNS record so sign-in routes through your identity provider.

## Questions

### Do you support SAML and OIDC?

Yes. Single sign-on works with SAML or OIDC.