> For the complete documentation index, see [llms.txt](https://docs.statuspal.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.statuspal.io/security/single-sign-on/configure-role-provisioning-for-okta.md).

# Configure role provisioning for Okta

Once you have your StatusPal SSO configured with Okta by following [Configure SSO for your status page with Okta](/platform/integrations/configure-sso-for-your-status-page-with-okta.md), you can follow these steps to start sending the `groups` attribute to enable role provisioning.

1. In your Okta admi dashbord, head over to Applications and click on your <mark style="background-color:green;">statuspal.io</mark> application.

   <figure><img src="/files/zY6vcTvaUkm0fXETQb7B" alt=""><figcaption></figcaption></figure>
2. Click on the **General tab**, scroll down to the **SAML Settings** section, and click on <mark style="background-color:green;">**Edit**</mark>.
3. Click <mark style="background-color:green;">**Next**</mark>, and then scroll down to the **Group Attribute Statements** section under the **Configure SAML step**.
4. Enter the following details:<br>

   <figure><img src="/files/nGftPnmmvp11kWfIR9zH" alt=""><figcaption></figcaption></figure>

   1. Name: groups
   2. Name format: unspecified
   3. Filter: Matches regex: `.*`
5. Click on **Next** and **Finish**.

Now, we should receive the `groups` attribute from Okta, containing the groups that are assigned to the user signing in.

{% hint style="warning" %}
What's left to enable role provisioning is to configure the SSO settings in StatusPal. Follow this guide for that [Configure Role provisioning from SAML attributes](/security/single-sign-on/configure-role-provisioning-from-saml-attributes.md#configure-your-sso-role-mappings-in-statuspal)
{% endhint %}
