Single Sign On (SSO) allows users to log in once and access all mutually trusted application systems in a multi-application environment. Once users enable this feature and complete the configuration in the management backend, they can choose to directly log in to LiveAvatar using SSO.

Go into your main Okta homepage and click Admin in the upper right corner.

After logging in, click Applications > Applications.

Click Create App Integration.

Select SAML 2.0.

Name the App LiveAvatar, then click Next.

Here you'll need to input two URLs from your LiveAvatar account.

One is called Single Sign-On URL, and the second is called Audience URL (SP Entity ID).

Leave this tab open and switch over to your LiveAvatar account.

On your LiveAvatar homepage, click on the bottom left to open the menu, and then click Workspace Settings. Then under the Security Tab, click Setup Single Sign-on. You can find Single Sign-On URL that needs to be copied back to Okta under item 3 named URL.
​

For the 2nd URL needed in Okta - Audience URL (SP Entity ID) you can use this URL and paste it there: https://api2.heygen.com

Note: Ensure your application passes user identity to LiveAvatar in "email" format; that is the NameID claim is in the form of an email address.

Set the following user attributes:

Scroll down and click Next.

Select "I'm an Okta customer adding an internal app" and "This is an internal app that we have created", then click Finish.

Click Assignments on the Applications page and click Assign to add users who need to use LiveAvatar.

Click Sign On and scroll down.

Click View SAML setup instructions.

The following three parameter information will be used to configure LiveAvatar.

On LiveAvatar Security page, fill in the three parameter information obtained from Okta and click Save.

When signing into your LiveAvatar account, click Sign In from https://app.liveavatar.com or https://auth.heygen.com