Log in to Okta as an administrator and select “Applications” in the navigation bar.

Create a new application by selecting the "Create App Integration" button.

Choose "OIDC - OpenID Connect" application:

For Logo, you can use:

Sign-in redirect URIs: You should've received a callback URL by Cocoon with the format of https://app.cocoon.com/auth/oidc/callback?org={ORG_NAME}

Sign-out redirect URIs: https://app.cocoon.com/logout

Assignments: select a group of users who should have access to administer your company's Cocoon instance. Note that currently, Cocoon doesn't provision new employer admin accounts and requires an email to be invited and verified before they can login using SSO. However, we'll start provisioning users based on custom claims in the future. Therefore, make sure that only the actual Cocoon employer admins are assigned to Cocoon.

To setup the SSO, Cocoon needs "Client ID" and "Client Secret" under the General tab

Additionally you can find "Issuer URL" under "Sign On" tab.

Edit "Login initiated by" field under "General" tab

Initiate login URI: You should've received an "IdP-initiated Login URL" by Cocoon with the format of https://app.cocoon.com/auth/oidc?org={ORG_NAME}

Okta bookmark simply acts to redirect users to a login page where they will manually sign in to the external application using a username and password known only to them. You can set this up via https://help.okta.com/en-us/Content/Topics/Apps/apps-create-bookmark.htm. For the sign-in URL please use https://app.cocoon.com/login.