---
title: "Just-In-Time User Creation with Okta"
slug: "just-in-time-user-creation-with-okta"
tags: ["single sign-on"]
updated: 2022-02-17T17:01:29Z
published: 2022-02-17T17:01:29Z
canonical: "support.smarteru.com/just-in-time-user-creation-with-okta"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.smarteru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Just-In-Time User Creation with Okta

Setting up Just-In-Time user creation with Okta consists of three main steps:

1. [Creating an application in Okta.](/v1/docs/just-in-time-user-creation-with-okta#creating-an-application-in-okta)
2. [Copying the IDP Metadata from Okta.](/v1/docs/just-in-time-user-creation-with-okta#copying-idp-metadata-from-okta)
3. [Setting up Just-In-Time user creation in SmarterU.](/v1/docs/just-in-time-user-creation)

Two of these steps are detailed below. We recommend reading through the steps prior to going through the process.

## Creating an Application in Okta

To set up an application in Okta:

1. Log into Okta as a user with administrative privileges.
2. From the list in the upper left corner, ensure that *Classic UI* is selected.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Okta%20JIT%20-%20Classic%20UI%2020220202.png)

1. Click the **Applications** link.
2. Click **Add Application**.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Okta%20JIT%20-%20Add%20Application%20Button%2020220202.png)

1. Click **Create New App.**

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Okta%20JIT%20-%20Create%20New%20App%20Button%2020220202.png)

The Create a New Application Integration window displays.

1. For the **Sign On Method** setting, select the *SAML 2.0* option.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Okta%20JIT%20-%20Create%20New%20App%20Integration%20-%20Sign%20On%20Method%2020220202.png)

1. Click **Create**. The Create SAML Integration workscreen displays.
2. In the **App Name** field, enter a meaningful name.
3. Click **Next**.
4. Enter the values below for the the settings.

| **Setting** | **Value** |
| --- | --- |
| **Single Sign On URL** | https://integrations.smarteru.com/integrations/saml/ |
| **Audience URI (SP Entity ID)** | integrations.smarteru.com |

![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/just-in-time-user-creation-with-okta-image-skxxu8nj.png)

1. Scroll down to the Attribute Statements section and add the following attribute statements.

| **Name** | **Name Format** | **Value** |
| --- | --- | --- |
| FirstName | URI Reference | user.firstName |
| LastName | URI Reference | user.lastName |
| Email | Unspecified | user.email |

![Graphical user interface Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/just-in-time-user-creation-with-okta-image-1cwpz7j0.png)

1. Click **Next**. Step 3 of the Create SAML Integration workscreen displays.
2. On the Step 3 of the Create SAML Integration workscreen:
  1. Select the **I'm an Okta customer adding an internal app** option.
  2. Check the **This is an internal app that we have created** checkbox.
  3. Click **Finish**.

![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/just-in-time-user-creation-with-okta-image-2p5hq9nn.png)

The Sign On Settings for the application you just created display.

![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/just-in-time-user-creation-with-okta-image-tviunbq0.png)

**NEXT STEP:** [Copy IDP Metadata from Okta](/v1/docs/just-in-time-user-creation-with-okta#copying-idp-metadata-from-okta)

## Copying IDP Metadata from Okta

To copy the IDP metadata from Okta:

1. From the Sign On Settings for the application, click **View Setup Instructions**.

![](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/Okta%20JIT%20-%20View%20Setup%20Instructions%20Button%2020220202.png)

A page displays all the information you need to enable SAML and Just-In-Time user creation. Toward the bottom of the page is the IDP metadata.

![Text Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/just-in-time-user-creation-with-okta-image-64q9hngz.png)

1. Copy the IDP metadata.

**NEXT STEP:** [Set Up Just-in-Time User Creation in SmarterU](/v1/docs/just-in-time-user-creation)

## Related

- [Account: External Authorization (SSO)](/account-external-authorization-sso.md)
- [Editing Your Account Settings](/editing-your-account-settings.md)
- [Just-In-Time User Creation](/just-in-time-user-creation.md)
- [SSO: Okta](/sso-okta.md)
- [SSO: SAML 2.0](/sso-saml-20.md)
- [User Sync Integrations](/user-sync-integrations.md)