SSO Setup

​

Overview

1. Configuring SSO in StackOne
2. Setting up a SAML application in Okta
3. Completing the SSO registration
4. Verifying your domain

​

Prerequisites

• Org Admin role in your StackOne organization
• Access to your identity provider’s admin dashboard (e.g., Okta)
• Ability to manage DNS records for your organization’s domain

​

Configure SSO in StackOne

1

Copy the Service Provider details

The first step displays two values you’ll need when configuring your identity provider:

• ACS URL (Assertion Consumer Service URL) — the endpoint where your IdP sends SAML assertions
• SP Entity ID (Service Provider Entity ID) — the metadata URL that identifies StackOne as the service provider

Enter a Provider ID at the bottom of this step. This is a unique identifier for your SSO configuration (e.g., your-company-sso). It must be lowercase and can contain letters, numbers, hyphens, and dots.The ACS URL and SP Entity ID update automatically based on your Provider ID.

Copy both values — you’ll paste them into your identity provider in the next section.

2

Configure your identity provider

After setting up the SAML application in your IdP (see Okta example below), collect these three values from the IdP:

• Identity Provider Issuer (Entity ID) — the IdP’s unique identifier URL
• Identity Provider Single Sign-On URL — the IdP’s login endpoint
• X.509 Certificate — the signing certificate in PEM format

3

Register the SSO provider

Fill in the registration form with the values collected from your IdP:

Field	Description	Example
Provider ID	Unique identifier (set in step 1)	acme-corp-sso
Domain	Email domain for SSO users	acme.com
Entity ID (Issuer)	IdP issuer URL from step 2	http://www.okta.com/exk...
SSO URL (Entry Point)	IdP login URL from step 2	https://acme.okta.com/app/.../sso/saml
X.509 Certificate	Signing certificate from step 2	-----BEGIN CERTIFICATE-----...

Click Register SSO Provider to save the configuration.

​

Set Up a SAML Application in Okta

1

Create a new application

In your Okta admin dashboard, go to Applications > Applications and click Create App Integration.Select:

• Sign-in method: SAML 2.0

Click Next.

2

Configure general settings

Enter a name for the application (e.g., “StackOne SSO”) and optionally upload a logo.Click Next.

3

Configure SAML settings

In the SAML Settings section, enter the values from StackOne’s SSO setup (step 1):

Okta Field	Value from StackOne
Single sign-on URL	ACS URL
Audience URI (SP Entity ID)	SP Entity ID
Name ID format	EmailAddress
Application username	Email

Click Next, then Finish.

4

Copy the IdP values

After creating the application, go to the Sign On tab and on the right you will find the SAML Setup section. Click View SAML setup instructions.From here, copy:

• Identity Provider Single Sign-On URL
• Identity Provider Issuer
• X.509 Certificate

5

Assign users

Go to the Assignments tab and assign the users or groups that should have access to StackOne via SSO.

​

Complete the SSO Registration in StackOne

​

Verify Your Domain

1

Copy the DNS TXT record

On the SSO provider card, find the Domain Verification section. It displays a DNS TXT record in this format:

Copy

_stackone-sso-verification-token-{providerId}={verificationToken}

Copy the full record value.

2

Add the TXT record to your DNS

Go to your domain’s DNS management panel (e.g., Cloudflare, Route 53, GoDaddy) and add a new TXT record with the value from the previous step.

DNS propagation can take up to 48 hours, though it typically completes within minutes to a few hours.

3

Verify the domain in StackOne

Return to the StackOne SSO settings and click Verify Domain. If the DNS record has propagated, you’ll see a success message confirming that SSO is active.If verification fails, wait for DNS propagation and try again.

​

Managing Your SSO Configuration

• Edit SSO settings — Update the domain, issuer, entry point, or certificate by clicking Edit SSO on the provider card
• Delete SSO — Remove the SSO configuration entirely by clicking Delete SSO

​

Troubleshooting