Okta SSO (OIDC)

Configure Okta OIDC with Lovable SSO

Use this guide to connect Okta to Lovable using OIDC.

Prerequisites

• Okta admin access
• Lovable workspace Owner or Admin

Configure in Okta

1. Create an OIDC app

   In Okta Admin → Applications → Create App Integration → OIDC - Web Application.

2. Redirect URI

   Add:

   • https://auth.lovable.dev/\_\_/auth/handler
3. Assignments

   Assign the application to your users/groups who should access Lovable.

4. Grants and scopes

   Ensure Authorization Code flow is enabled. Scopes required:

   • openid
   • email
5. Copy values to Lovable

   In Okta, locate:

   • Okta domain (issuer)
   • Client ID
   • Client Secret

   Enter these in Lovable → Settings → Workspace → Identity.

Reference

• Redirect URI: https://auth.lovable.dev/\_\_/auth/handler
• Required scopes: openid, email

Troubleshooting

Invalid redirect URI

Ensure the redirect URI exactly matches https://auth.lovable.dev/\_\_/auth/handler in Okta.

Email missing in profile

Grant the email scope and ensure users have a primary email in Okta.