On this page
Your IT admin adds CaterCow from the Okta app catalog, then enters the app’s details in CaterCow. After that, everyone with an email on your company’s domain logs in to CaterCow with their Okta account.
Using Microsoft Entra ID instead? See How do I set up Microsoft Entra ID (OIDC) single sign-on?
Before you start
- Single sign-on has to be available for your company first. When it is, your company’s designated admin sees Manage Enterprise Settings (e.g. Okta SSO) on your organization’s Settings tab. Don’t see it? Email us at support@catercow.com to set it up.
- You need someone who can add apps in your company’s Okta org.
Set it up in Okta
1. In the Okta Admin Console, go to Applications and click Browse App Catalog. Search for CaterCow and add it.
2. Assign the people or groups who should log in to CaterCow.
3. On the CaterCow app’s Sign On tab, copy the Client ID and Client Secret.
Unlike Microsoft Entra ID, you don’t enter a redirect address. The catalog app already has it.
Enter the details in CaterCow
1. Log in to CaterCow. Click Manage Organization under your organization’s name, then open the Settings tab.
2. Click Manage Enterprise Settings (e.g. Okta SSO). Under SSO, click Update SSO Settings.
3. For Provider, choose Okta.
4. Fill in Issuer URL, Client ID, and Client Secret. The Issuer URL is your Okta address, starting with https://, such as https://yourcompany.okta.com.
5. Click Submit.
From then on, everyone with an email on your company’s domain logs in through Okta. The change can take up to a minute to reach the login page. Stay logged in here, and test it by logging in with a work email in a private browser window. If that fails, go back to Update SSO Settings and enter the values again.
You type these values into CaterCow yourself, so you never need to send us your client secret. The form never shows your current values, so to change one, fill in every field again.
How your team logs in
1. Go to catercow.com/login.
2. Enter your work email. The password field disappears, and the button changes to Log in with SSO.
3. Click Log in with SSO, then sign in with your Okta account.
No need to sign up first: your first sign-in creates your CaterCow account. If you already had an account with your work email, you keep it and its orders. Your CaterCow password stops working.
What changes for your team
- Sign-in starts on CaterCow. Clicking the CaterCow tile in your Okta dashboard doesn’t sign you in. Go to catercow.com/login and enter your work email.
- Each person needs an email in Okta on your company’s domain. CaterCow signs them in by that email.
- Passwords, Google sign-in, and Apple sign-in stop working for emails on your company’s domain. People with other emails, like contractors with personal addresses, keep logging in the way they do now.
- Single sign-on doesn’t add people to your organization on its own. An Admin still needs to invite them. If your organization uses single sign-on and you were invited, your first sign-in from your invite link adds you to that organization. See How do I join my organization from an invite link?
- CaterCow doesn’t sync with Okta. Removing someone in Okta doesn’t remove them from your organization on CaterCow. Remove them there too.
- On My Account, single sign-on users can’t change their email, and the password and two-factor settings don’t appear.
What if…
…sign-in fails at Okta? CaterCow shows an “Okta sign-in failed” page with Okta’s error message word for word. Check with your IT admin before you contact support@catercow.com. If the message says the user isn’t assigned to the client application, assign them to the CaterCow app in Okta.
…someone signs in at Okta but isn’t logged in to CaterCow? Check that their Okta account has an email address on your company’s domain.
…I rotate the client secret in Okta? Enter the new one on Update SSO Settings before you turn off the old one. While CaterCow has a secret Okta no longer accepts, no one on your company’s domain can log in through single sign-on, you included. If that happens, email us at support@catercow.com.
…Enterprise Settings says SSO is currently disabled? Your team logs in with their usual CaterCow login for now. Email us at support@catercow.com to turn it back on.