Note: These domains must be linked to your community's current domain.  If your domain updates or if you are using a custom domain- the new domain must be reflected here.

Log into your OKTA account

1. Go to https://*******-admin.okta.com/admin/apps/active
2. Click on Add Application
3. Create a new app
4. Select Platform Web and SAML 2.0

In the SAML Settings fill in the following fields:

Single Sign On URL **

https://<your-subdomain>.mobilize.io/users/auth/saml/callback

Note: [**]These domains must be linked to your community's current domain.  If your domain updates or if you are using a custom domain- the new domain must be reflected here.

Audience URI (Restriction)

https://<your-subdomain>.mobilize.io/users/auth/saml/metadata

7. In the assignments tab, make sure you added the member in the assignments

Go to Sign on tab

1. View Setup Instructions
2. Copy Identity Provider Single Sign-On URL and paste it in Mobilize Setup screen in SSO Target URL
3. Copy Identity Provider Issuer and paste in Mobilize setup screen in Metadata URL
4. Download Certificate
5. You will need to create a sha1 hash for the certificate
6. In osx open the terminal to where you downloaded the certificate
7. And run openssl x509 -noout -fingerprint -sha1 -inform pem -in okta.cert
8. Copy the output and paste it in the fingerprints field in Mobilize setup
9. Fill in the Button Label Text box 
10. Click the Save Change button