Skip to main content
This guide explains how to use Okta as an identity provider for single sign-on (SSO) into the ngrok dashboard, using OpenID Connect (OIDC). If you want to use SAML instead, see Configure Okta Single Sign-On (SSO). It does not cover configuring an ngrok endpoint so that your application users can log in using Okta.

​
What you’ll need

​
1. Create a new OIDC app integration in Okta

  • From the Applications menu, click Create App Integration.
  • Select OIDC - OpenID Connect, then click Next.
  • Select Web Application, then click Next.
  • Give your app a name, then click Next.
  • Under Sign-in redirect URIs, enter https://idp.ngrok.com/oauth2/callback.
  • Click Save.
  • On the Assignments tab, assign the users or groups that need dashboard access.
  • On the General tab, copy the Client ID and Client Secret. You’ll need these values for the ngrok side.

​
2. Configure SSO for your ngrok account

  • Log into your ngrok dashboard and go to Settings > Account.
  • Click + New Identity Provider, then select New OpenID Connect Provider.
  • Set Issuer URL to your Okta org URL, for example https://{yourOktaDomain}.okta.com.
  • Enter the Client ID and Client Secret from Okta.
  • In the Scopes field, add the required email scope. You can optionally add the profile scope too to show a user’s name instead of their email address.
  • Click Save.
You can now log in to your ngrok account by authenticating with Okta. By default, your ngrok account allows users to log in with their existing credentials and through Okta (“Mixed Mode”). After you confirm the integration works, turn on SSO Enforced in the ngrok dashboard to require all new users to log in with Okta SSO.