Single Sign On (SSO) allows users to log in once and access all mutually trusted application systems in a multi-application environment. Once users enable this feature and complete the configuration in the management backend, they can choose to directly log in to HeyGen using SSO

Go into your main Okta homepage and click Admin in the upper right corner.

After logging in, click Applications > Applications.

Click Create App Integration.

Select SAML 2.0.

Name the App HeyGen, then click Next.

Here you'll need to input two URLs from your HeyGen account.

One is called Single Sign-On URL, and the second is called Audience URL (SP Entity ID).

Leave this tab open and switch over to your HeyGen account.

On your HeyGen homepage, click on the bottom left to open the menu, and then click Settings. Then, under the Security Tab, click on Turn on / off SSO to turn it on.

In the same Security Tab under Settings, you can find Single Sign-On URL that needs to be copied back to Okta under item 4 named URL.

Please paste this URL into the second URL line called Audience URL (SP Entity ID) in your okta: https://api2.heygen.com

Note: Ensure your application passes user identity to HeyGen in "email" format; that is the NameID claim is in the form of an email address.

Set the following user attributes:

Scroll down and click Next.

Select I'm an Okta customer adding an internal app and This is an internal app that we have created, then click Finish.

Click Assignments on the Applications page and click Assign to add users who need to use HeyGen.

Click Sign On and scroll down.

Click View SAML setup instructions.

The following three parameter information will be used to configure HeyGen.

On HeyGen SSO page，fill in the three parameter information obtained from Okta and click Save.

When signing into your HeyGen account, click Sign In from www.HeyGen.com or https://auth.heygen.com