# Setting Up SSO with Okta or a Custom OIDC Provider

**Category:** [Security & Access](https://help.totalctrl.app/hc/totalctrl/totalctrl-help-center/en-US/categories/security-access)
**Updated:** 2026-08-19

## Overview

TotalCtrl supports any OpenID Connect (OIDC)-compliant identity provider, including Okta, Auth0, Ping Identity, and others. You need the provider's **discovery URL**, a client ID, and a client secret.

## Configure SSO in TotalCtrl

  
- Go to **Settings → Security → SSO → New SSO configuration**.
  
- Select **Custom OIDC** as the provider.
  
- Enter the **OIDC discovery URL** (e.g. for Okta: `https://[your-domain].okta.com/.well-known/openid-configuration`).
  
- Paste the Client ID and Client secret.
  
- Set **Domain hint** to your company domain(s), comma-separated.
  
- Toggle **Active** and save.

## Multiple domains

If your organisation has multiple email domains, enter them comma-separated in the Domain hint field.

---

## Related Articles

- [Single Sign-On (SSO)](https://help.totalctrl.app/en-US/articles/single-sign-on-sso)
- [Two-Factor Authentication (2FA)](https://help.totalctrl.app/en-US/articles/two-factor-authentication-2fa)
- [Setting Up SSO with Google Workspace](https://help.totalctrl.app/en-US/articles/setting-up-sso-with-google-workspace)
- [API Tokens](https://help.totalctrl.app/en-US/articles/api-tokens)
- [Setting Up SSO with Microsoft / Azure AD](https://help.totalctrl.app/en-US/articles/setting-up-sso-with-microsoft-azure-ad)

---
[← Back to TotalCtrl Help Center](https://help.totalctrl.app/en-US/)