> This page is for Platform Management.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.moveworks.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.moveworks.com/_mcp/server.

# Okta SSO Configuration Guide for Non-US Commercial Regions (OIDC)

> **This guide is deprecated**
>
> Please see our updated [Okta Installation Guide (🔗)](/platform-management/sso/configure-okta-sso-app/okta-sso-configuration-guide)

# Before you begin

* Ensure you have **Admin Access** to your Okta instance.
* You have collected the **CUSTOMER_ID** under **Organization Details > General Information**.
  * This is the unique identifier for your organization . This is stored as **Org Name**
    ![](https://files.readme.io/ec5bf3b5e47317fcf8d2ba7f7d6b1348befd4c402553e53c4d966795d1715e13-CleanShot_2024-11-11_at_14.53.19.png)
    > ❗️ The Org name cannot be changed. Once set, the same value should be used in all cases.
    >
    > In exceptional cases where you would like Moveworks to support your organisation with a different subdomain value. Please reach out to Moveworks Support.

# Okta App Setup Instructions

1. Go to the screen in Okta that allows you to create Applications.
2. Click on **Create App Integration**.

![](https://files.readme.io/39b4f06-image-20210715-094919_5.png)

3. Select **OIDC - OpenID Connect** in the next screen.

![](https://files.readme.io/1db3930-Screen_Shot_2022-06-01_at_5.19.51_PM_2.png)

4. Specify a name for the application.

5. Add the logo for Moveworks application

6. Identify the appropriate Sign-in Redirect URI and Login URI for your environment from the table below, replacing the `CUSTOMER_ID` with the value for your org which was collected as part of the Prerequisites.

| Region                   | Sign-in Redirect URI                                                                                                                 | Login URI                                                                                              |
| :----------------------- | :----------------------------------------------------------------------------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------- |
| United States (default)  | [https://CUSTOMER_ID.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.moveworks.com/login/sso/oidc)                                 | [https://CUSTOMER_ID.moveworks.com](https://CUSTOMER_ID.moveworks.com)                                 |
| Canada                   | [https://CUSTOMER_ID.am-ca-central.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.am-ca-central.moveworks.com/login/sso/oidc)     | [https://CUSTOMER_ID.am-ca-central.moveworks.com](https://CUSTOMER_ID.am-ca-central.moveworks.com)     |
| EU                       | [https://CUSTOMER_ID.am-eu-central.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.am-eu-central.moveworks.com/login/sso/oidc)     | [https://CUSTOMER_ID.am-eu-central.moveworks.com](https://CUSTOMER_ID.am-eu-central.moveworks.com)     |
| Australia / Asia Pacific | [https://CUSTOMER_ID.am-ap-southeast.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.am-ap-southeast.moveworks.com/login/sso/oidc) | [https://CUSTOMER_ID.am-ap-southeast.moveworks.com](https://CUSTOMER_ID.am-ap-southeast.moveworks.com) |
| Government Secure Cloud  | [https://CUSTOMER_ID.moveworksgov.com/login/sso/oidc](https://CUSTOMER_ID.moveworksgov.com/login/sso/oidc)                           | [https://CUSTOMER_ID.moveworksgov.com](https://CUSTOMER_ID.moveworksgov.com)                           |
| Japan                    | [https://CUSTOMER_ID.jp.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.jp.moveworks.com/login/sso/oidc)                           | [https://CUSTOMER_ID.jp.moveworks.com](https://CUSTOMER_ID.jp.moveworks.com)                           |
| UK                       | [https://CUSTOMER_ID.uk.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.uk.moveworks.com/login/sso/oidc)                           | [https://CUSTOMER_ID.uk.moveworks.com](https://CUSTOMER_ID.uk.moveworks.com)                           |
| US Prod 4                | [https://CUSTOMER_ID.prod4.us.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.prod4.us.moveworks.com/login/sso/oidc)               | [https://CUSTOMER_ID.prod4.us.moveworks.com](https://CUSTOMER_ID.prod4.us.moveworks.com)               |
| US Prod 3                | [https://CUSTOMER_ID.prod3.us.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.prod3.us.moveworks.com/login/sso/oidc)               | [https://CUSTOMER_ID.prod3.us.moveworks.com](https://CUSTOMER_ID.prod3.us.moveworks.com)               |

7. Enter the values as shown below and hit Save.

![](https://files.readme.io/942c0af-1.png)

![](https://files.readme.io/6288597-1.png)

8. Go back to General Settings and uncheck **Require consent**.

![](https://files.readme.io/b385444-2.png)

![](https://files.readme.io/63a8630-3.png)

9. In order to allow customer users to login without manually inputting email, set a **Initiate login URI** from the table below based on the Region you are setup in. Replacing the `CUSTOMER_ID` with the value for your org which was collected as part of the **Prerequisites**.

| Region                   | Sign-in Redirect URI                                                                                                                 | Login URI                                                                                              |
| :----------------------- | :----------------------------------------------------------------------------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------- |
| United States (default)  | [https://CUSTOMER_ID.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.moveworks.com/login/sso/oidc)                                 | [https://CUSTOMER_ID.moveworks.com](https://CUSTOMER_ID.moveworks.com)                                 |
| Canada                   | [https://CUSTOMER_ID.am-ca-central.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.am-ca-central.moveworks.com/login/sso/oidc)     | [https://CUSTOMER_ID.am-ca-central.moveworks.com](https://CUSTOMER_ID.am-ca-central.moveworks.com)     |
| EU                       | [https://CUSTOMER_ID.am-eu-central.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.am-eu-central.moveworks.com/login/sso/oidc)     | [https://CUSTOMER_ID.am-eu-central.moveworks.com](https://CUSTOMER_ID.am-eu-central.moveworks.com)     |
| Australia / Asia Pacific | [https://CUSTOMER_ID.am-ap-southeast.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.am-ap-southeast.moveworks.com/login/sso/oidc) | [https://CUSTOMER_ID.am-ap-southeast.moveworks.com](https://CUSTOMER_ID.am-ap-southeast.moveworks.com) |
| Government Secure Cloud  | [https://CUSTOMER_ID.moveworksgov.com/login/sso/oidc](https://CUSTOMER_ID.moveworksgov.com/login/sso/oidc)                           | [https://CUSTOMER_ID.moveworksgov.com](https://CUSTOMER_ID.moveworksgov.com)                           |
| Japan                    | [https://CUSTOMER_ID.jp.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.jp.moveworks.com/login/sso/oidc)                           | [https://CUSTOMER_ID.jp.moveworks.com](https://CUSTOMER_ID.jp.moveworks.com)                           |
| UK                       | [https://CUSTOMER_ID.uk.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.uk.moveworks.com/login/sso/oidc)                           | [https://CUSTOMER_ID.uk.moveworks.com](https://CUSTOMER_ID.uk.moveworks.com)                           |
| US Prod 4                | [https://CUSTOMER_ID.prod4.us.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.prod4.us.moveworks.com/login/sso/oidc)               | [https://CUSTOMER_ID.prod4.us.moveworks.com](https://CUSTOMER_ID.prod4.us.moveworks.com)               |
| US Prod 3                | [https://CUSTOMER_ID.prod3.us.moveworks.com/login/sso/oidc](https://CUSTOMER_ID.prod3.us.moveworks.com/login/sso/oidc)               | [https://CUSTOMER_ID.prod3.us.moveworks.com](https://CUSTOMER_ID.prod3.us.moveworks.com)               |

![](https://files.readme.io/6673781-4.png)

## Finish the Moveworks side of the integration

After setup is complete, provide the following information to your Customer Success team.

1. Go to the General tab.

![](https://files.readme.io/6220af7-Screen_Shot_2022-04-26_at_2.52.19_PM_2.png)

2. Share the `idp_client_id` , `idp_secret` , and `idp_issuer` with your Customer Success team. The `idp_issuer` is not in the Okta settings, but it should be based on your Okta instance name (e.g. If you login at [https://example.okta.com](https://example.okta.com) , then share that value for your `idp_issuer` ).
   ![](https://files.readme.io/7327e0c-1.png)
   1\.

   \