> For the complete documentation index, see [llms.txt](https://zts-guard.gitbook.io/zts-guard-discord-bot/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zts-guard.gitbook.io/zts-guard-discord-bot/setup-okta-authentication-optional.md).

# Setup Okta Authentication (Optional)

Many organizations use [Okta as their SSO/SAML provider](https://www.okta.com/products/single-sign-on-workforce-identity/?utm_source=google\&utm_campaign=amer_mult_usa_all_wf-all_dg-ao_a-wf_search_google_text_kw_brand-general_utm2\&utm_medium=cpc\&utm_id=aNK4z000000kAn0GAE\&gad_source=1\&gad_campaignid=20394199184\&gbraid=0AAAAACww3aEDR0ajx-0fViiF-iGMsxm1l\&gclid=EAIaIQobChMIlfLgzLnVlAMVcFz_AR05bCV_EAAYAiAAEgKjE_D_BwE). Therefore instead of having individual users use their own 2FA authentication apps for their 2FA, you can setup Okta so whenever a user needs to provide a successful 2FA authentication, they can do so via Okta.

{% hint style="warning" %}
You only need to perform these steps if you use Okta as SSO/SAML. If you do not skip this page.
{% endhint %}

{% hint style="info" %}
The **Server Owner (Cold Admin) is exempt** from 2FA setup. This section is only for organizations integrating Okta as their authentication provider.
{% endhint %}

## Steps to setup Okta Authentication

{% stepper %}
{% step %}

## Start in the bot

In `#zts-guard-admin`, type `/setup` → `Auth allowlist` → `Configure Okta`.

The bot will display a redirect URI — keep this window open.
{% endstep %}

{% step %}

## Create a new Okta application

In your Okta dashboard:

1. Click **Create New Application**

<figure><img src="/files/JTf0Svm61gXVbrumer4B" alt=""><figcaption></figcaption></figure>

2. Select **Web** for Platform

<figure><img src="/files/x5je1F8EauHqOu9FbviO" alt=""><figcaption></figcaption></figure>

3. Select **OpenID Connect** for Sign-on Method

<figure><img src="/files/2qhYAKyTP0bVz6ij7LQe" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

## Configure assignments

Choose which groups should have access to this authentication flow.

<figure><img src="/files/pcRV1rNzRRkqXrOcArbu" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %}
Limit access to only the groups who need access to this bot — do not open it to your entire organization.
{% endhint %}
{% endstep %}

{% step %}

## Add the redirect URI

Copy the redirect URI shown in the bot and paste it into the `Sign-In Redirect URL` field in Okta, then click `Save`.
{% endstep %}

{% step %}

## Submit credentials to the bot

After saving, Okta will show your app's Client ID and Client Secret. Copy and paste them into the bot.

<figure><img src="/files/BFuRRPDpkEnYWY2OCdOG" alt=""><figcaption></figcaption></figure>

{% hint style="danger" %}
Do not save these credentials locally on your device or paste them anywhere else.
{% endhint %}
{% endstep %}

{% step %}

## Test authentication

Complete the test authentication prompt shown in the bot.

{% hint style="warning" %}
Do not dismiss this message. It will confirm whether the authentication flow is working correctly and is necessary to confirm it is setup correctly.
{% endhint %}
{% endstep %}
{% endstepper %}

## Using Okta after setup

Once configured, users authenticate by typing `/auth` in `#zts-guard-admin` and choosing `Auth with Okta`