Overview
What Okta is
Okta is an identity provider that manages who can sign in to your company's apps and how.
Courier connects to Okta so your team signs in to their Courier workspace with SSO, and admins manage access to Courier from Okta instead of one account at a time.
Okta SSO is available on the Courier Enterprise plan and is set up together with Courier Support.
What you get
SSO and user management for your workspace
Sign in with Okta
Your team authenticates to Courier through Okta using SAML 2.0, instead of an email and password or Google login.
Manage access from Okta
With SCIM v2 provisioning, admins create, update, and deactivate Courier users directly from Okta's admin interface.
Setup
Connect Okta to Courier
Okta SSO is configured with the Courier team. Reach out first, then set up the app in Okta and share your details.
FAQ
Frequently asked questions
Can I use Okta with Courier?
Yes. Courier supports Okta as a single sign-on provider, so your team can sign in to your Courier workspace with their existing Okta credentials instead of a separate Courier password.
What does the Okta integration do?
It handles team sign-in and account management. Members authenticate through Okta, and the users you assign in Okta sync to your Courier workspace automatically, so you control who has access from one place.
How do I set up Okta SSO with Courier?
Create a SAML app in your Okta admin console, then contact Courier Support for the connection values to paste into the SAML settings. Add the required id and email attribute statements, then assign your users in Okta.
What protocol does Courier use for Okta SSO?
SAML 2.0 for authentication and SCIM v2 for provisioning. SAML handles the login handshake, while SCIM keeps user accounts in sync between Okta and your Courier workspace.
Does Courier support SCIM user provisioning with Okta?
Yes, on the Enterprise plan. Assigning a user in Okta provisions them in Courier and pushes profile updates, and unassigning removes them. A role attribute maps their Courier permissions, defaulting to Analyst if unset.
Can users open Courier from the Okta app tile?
No. Courier does not support IdP-initiated login, so clicking the tile in Okta will not launch it. Users sign in through the Courier bookmark app or the email login flow instead. Invitations expire after 14 days.
Is Courier an identity provider?
No. Okta is the identity provider; Courier connects to it for sign-in and does not manage your team's passwords. Okta stays the source of truth for who has access, and provisioned accounts follow your Okta assignments.