Okta SSO

Last updated: October 22, 2026

This article shows admins how to let employees sign in to PULT with Okta (SSO).

Prerequisite: Okta Sync must already be set up (Okta domain, access token and Sync Users in the PULT Okta settings). Use an admin account in your Okta tenant to create the required “Pult SSO” app.

In Okta

1. Applications

Go to Admin → Applications.

2. Create App Integration

Click Create App Integration. Select OIDC - OpenID Connect as the sign-in method and Web Application as the application type. Then click Next.

3. App settings

Make sure the following options match your screen and click Save:

App Integration Name	Pult SSO
Proof of possession	[ ]
Grant type	[X] Authorization code
Sign-in redirect URLs	https://app.pult.com/login/okta https://dash.pult.com/login/okta
Assignments	[X] Allow everyone in your organization to access [X] Enable immediate access with Federation Broker Mode

4. PKCE

After creating the app, enable Require PKCE as additional verification.

5. Okta API Scopes

In the Okta API Scopes tab, grant the following scopes:

okta.users.read.self
okta.myAccount.profile.read
okta.myAccount.organization.read
okta.myAccount.email.read

6. Rate limits

If you expect high-volume access (e.g. frequent logins to PULT via Okta SSO), consider increasing the Application Rate Limits.

7. Client ID and Client Secret

Go back to the General tab and copy the Client ID and Client Secret.

In PULT

8. Okta settings

In the PULT dashboard, go to Settings → General → Integrations and click Settings on the Okta card.

9. Enable SSO

Under SSO Settings, turn on Enable SSO.

10. Client Id and Client Secret

Paste the Client Id and Client Secret from step 7.

11. Save

Click Save in the SSO Settings section.

12. Sign in with Okta

Okta SSO is now set up. Users can sign in by entering their Okta domain on the login page.

Frequently asked questions

What happens to users who are removed from the selected Okta groups?

According to the PULT Okta settings, users that were synchronised before but are no longer included are archived.

Do I need Okta Sync for SSO?

Yes, set up Okta Sync first.

Does Okta Sync create users in PULT?

Yes. Okta Sync creates a PULT user for everyone in the selected Okta groups and archives users who are no longer included. Synchronised users don't receive an invitation email – they simply sign in with Okta. Invitation emails are only sent to people you add manually in the dashboard.

If you have any questions, feel free to contact our support team at support@pult.com.