NOTE: Please check your login source before configuration. 

1. In the Admin space, go to General > Org Settings.
2. Update the Allowed Login Source field.

Create OKTA App

1. Log in to Okta, then go to the Admin > Applications page. 
2. Click the Add Application button, then click the Create New App button.
3. In the Create a New Application Integration dialog, leave Web selected for Platform and change the sign-on method to SAML 2.0.
4. Click Create.
5. Enter "ChurnZero" for the App Name and click Next.
6. Enter these values for the following fields:
   • Single sign-on URL: https://app.churnzero.net/samlLogin
   • Audience URI (SP Entity ID): https://app.churnzero.net
   • Application username: Email
7. Click Next, then select "I'm an Okta customer adding an internal app."
8. Click Finish.
9. Inside the box with the yellow column, click View Setup Instructions. This will open a new tab containing the Identity Provider Issuer and X.509 Certificate that you’ll need to copy into ChurnZero. Leave this tab open.
10. Go back to the original Okta tab and click Assignments. Assign the application to people and groups as necessary, making sure your account is either assigned directly or in a group that is assigned.

Configure ChurnZero

1. Log in to ChurnZero, then use the app switcher to enter the Admin space. Then, go to Users > SAML.
   Note: If you do not see this option, please contact your ChurnZero representative.
2. Click the Create button at the upper right.
3. In the Create SAML SSO Configuration box, copy the Identity Provider Issuer and X.509 Certificate from the Okta Setup Instructions into the dialog form.
4. Click Save.
5. Log out of ChurnZero, go back to Okta->My Applications, and click the ChurnZero application.
6. If everything was set up correctly and the email address of your Okta account matches a user account in ChurnZero, you’ll automatically be logged in to ChurnZero. 
   1. If MFA is turned on you’ll still need to enter the authentication code.