> For the complete documentation index, see [llms.txt](https://docs.statuspal.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.statuspal.io/security/single-sign-on/configure-role-provisioning-for-okta.md).

# Configure role provisioning for Okta

Configure Okta to send the "groups" attribute to enable role provisioning in your StatusPal status page.

Once you have your StatusPal SSO configured with Okta by following [Configure SSO for your status page with Okta](/platform/integrations/configure-sso-for-your-status-page-with-okta.md), you can follow these steps to start sending the `groups` attribute to enable role provisioning.

1. In your Okta admi dashbord, head over to Applications and click on your <mark style="background-color:green;">statuspal.io</mark> application.

   <figure><img src="https://4061983002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgIMm5p2V7PNx3dS7vwKE%2Fuploads%2FzdeckoDTm3LVPatpf1kT%2FScreenshot%202025-04-17%20at%2011.14.50.png?alt=media&amp;token=83acf44a-146e-4bcb-9ec0-05df28133601" alt=""><figcaption></figcaption></figure>
2. Click on the **General tab**, scroll down to the **SAML Settings** section, and click on <mark style="background-color:green;">**Edit**</mark>.
3. Click <mark style="background-color:green;">**Next**</mark>, and then scroll down to the **Group Attribute Statements** section under the **Configure SAML step**.
4. Enter the following details:<br>

   <figure><img src="https://4061983002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgIMm5p2V7PNx3dS7vwKE%2Fuploads%2FwG4HOtDOsXlROGqa16CM%2FScreenshot%202025-04-17%20at%2011.10.25.png?alt=media&amp;token=9ca1a78c-eb28-4208-a4d0-d81dbb61db42" alt=""><figcaption></figcaption></figure>

   1. Name: groups
   2. Name format: unspecified
   3. Filter: Matches regex: `.*`
5. Click on **Next** and **Finish**.

Now, we should receive the `groups` attribute from Okta, containing the groups that are assigned to the user signing in.

{% hint style="warning" %}
What's left to enable role provisioning is to configure the SSO settings in StatusPal. Follow this guide for that [Configure Role provisioning from SAML attributes](/security/single-sign-on/configure-role-provisioning-from-saml-attributes.md#configure-your-sso-role-mappings-in-statuspal)
{% endhint %}