Set Up Okta SSO for JustCall

Manage my account3 min readUpdated 2026-03-12

Set Up Okta SSO for JustCall

Okta SSO lets your team authenticate to JustCall through Okta's identity platform. This removes the need for separate JustCall passwords and gives your IT team control over access from a single dashboard. SSO is available on the Business plan.

Prerequisites

JustCall Business plan
Okta admin access (Super Admin or Application Admin role)
A verified email domain in JustCall

Step 1: Enable SSO in JustCall

Go to Settings → Security → Single Sign-On in JustCall.
Click Enable SSO and select SAML 2.0.
Copy the ACS URL and Entity ID.

Step 2: Create a SAML App Integration in Okta

Log into the Okta Admin Console.
Go to Applications → Applications → Create App Integration.
Select SAML 2.0 and click Next.
Set the App name to JustCall. Upload a logo if desired. Click Next.
Configure SAML settings:

Field Value
Single sign-on URL Paste the ACS URL from JustCall
Audience URI (SP Entity ID) Paste the Entity ID from JustCall
Name ID format EmailAddress
Application username Okta username (email)
Add attribute statements:

Name Value
email user.email
firstName user.firstName
lastName user.lastName
Click Next.
Select I'm an Okta customer adding an internal app and click Finish.

Field	Value
Single sign-on URL	Paste the ACS URL from JustCall
Audience URI (SP Entity ID)	Paste the Entity ID from JustCall
Name ID format	EmailAddress
Application username	Okta username (email)

Name	Value
email	user.email
firstName	user.firstName
lastName	user.lastName

Step 3: Copy Okta Identity Provider Details

In the Okta app you just created, go to the Sign On tab.
Under SAML Signing Certificates, click Actions → View IdP metadata for the active certificate.
From the metadata page (or the Sign On tab details), copy:
- Identity Provider Single Sign-On URL
- Identity Provider Issuer
Download the X.509 Certificate.

Step 4: Complete Configuration in JustCall

Return to Settings → Security → Single Sign-On in JustCall.
Enter:
- SSO URL: Identity Provider Single Sign-On URL
- Issuer / Entity ID: Identity Provider Issuer
- Certificate: Upload the X.509 certificate
Set the Default Role for new SSO users.
Click Save Configuration.
Click Test Connection.

Step 5: Assign Users and Groups

In the Okta Admin Console, go to your JustCall application.
Click the Assignments tab.
Click Assign → Assign to People or Assign to Groups.
Select the users or groups and click Assign, then Save and Go Back.

Only assigned users can access JustCall through Okta. If a user is unassigned, they immediately lose SSO access.

From Okta: Users click the JustCall tile in their Okta dashboard.
From JustCall: Users click Sign in with SSO on the login page and enter their company email. They are redirected to Okta for authentication.

Troubleshooting

Issue	Solution
"Invalid SAML response"	Verify the ACS URL and Entity ID match between Okta and JustCall. Check for trailing slashes.
User gets "not assigned" error	Assign the user to the JustCall app in Okta (Assignments tab).
Attributes missing	Confirm attribute statement names exactly match: email, firstName, lastName.
Certificate error	Re-download the active certificate from Okta. Expired certificates cause authentication failures.