Proofsource and Okta: one sign-in, one roster
Connect Okta once and everyone with an email on your domain signs in to Proofsource through Okta instead of an email code. First-time people join the workspace automatically, and Okta's SCIM app adds, updates and removes them, with group-to-role mappings, so the team that watches your AI visibility is always the right team.
Proofsource and Okta, in short
The facts, ready to quote.
- Stage
- Live: open to every workspace
- Connects with
- SAML 2.0 (add domain, copy Entity ID and ACS URL into Okta, paste the metadata URL or XML) or OpenID Connect; SCIM 2.0 with a bearer token
- Who can set it up
- Workspace owners and admins, with a step-up confirmation on every change
- Provisioning
- SCIM 2.0 adds, updates and removes people, with group-to-role mapping
- Where it shows
- Settings, Single sign-on
- Disconnect
- Turn the connection off or remove it; people go back to email-code sign-in
Why we love Okta
In the makers' own words, from their own pages. Proofsource builds on it, never around it.
One login for every app
Okta gives people a single secure sign-in to the apps they use, backed by strong multi-factor authentication and one place for admins to control access.
From okta.comJoiners, movers and leavers on autopilot
Okta lifecycle management connects HR systems and IT resources so onboarding, access changes and offboarding happen automatically instead of by ticket.
From okta.comA catalog of ready-made integrations
The Okta Integration Network lists thousands of pre-built app integrations for access and provisioning, so connecting a new tool is a few clicks, not a project.
From okta.comHow Proofsource uses Okta
Okta single sign-on and SCIM provisioning for your whole Proofsource workspace.
- Connect
Add your email domain
An owner or admin adds the company email domain in Settings, Single sign-on. Proofsource shows the Entity ID and ACS URL, or takes an issuer, client ID and secret for OpenID Connect.
- Read
Trust the identity provider
Proofsource reads the SAML metadata URL or XML that Okta gives you (or the issuer, client ID and secret for OpenID Connect), checks the signature on every sign-in, and trusts only people whose email is on the verified domain.
- Show
One sign-in for the whole team
Once SSO is on, everyone with an email on the domain signs in through Okta instead of an email code, and first-time people join the workspace on the role you chose.
- Prove
Keep the roster current
Okta's SCIM app keeps the roster current. Remove someone in Okta and Proofsource removes them and signs them out everywhere, and Settings shows how many people are provisioned and how many are active.
Set up Okta in 4 steps
Add your domain in Proofsource
Open Settings, Single sign-on, choose SAML 2.0 or OpenID Connect and enter your email domain. Your own email must be on it. Pick whether new people join as Member or Viewer.
Create the app in Okta
For SAML, copy the Entity ID and ACS URL Proofsource shows into a new Okta SAML app. For OpenID Connect, create an OIDC app in Okta and note its issuer, client ID and secret.
Paste Okta's metadata and turn SSO on
Paste the Okta metadata URL (or the XML) into Proofsource and save. SSO turns on for the domain, and you can refresh the metadata later without starting over.
Add SCIM provisioning
Copy the SCIM base URL into Okta's SCIM connector base URL and the bearer token into its credentials, then map Okta groups to Proofsource roles. Provisioning needs SSO on the domain first.
 Okta group | Proofsource role |
|---|---|
| PS-Admins | Admin |
| Marketing | Member |
| Agency clients | Client viewer |
What you unlock with Okta
One sign-in
Your team signs in through your own identity provider instead of an email code.
Automatic joining
First-time people on your domain join the workspace on the role you picked, with nobody to invite.
Provisioning
SCIM 2.0 adds, updates and removes people, and removing someone signs them out everywhere.
Step-up on every change
Each SSO or SCIM change asks the person to confirm it is them first.
Group roles
Map identity provider groups to Admin, Member, Viewer, Client viewer or Product viewer.
Owner-only token
Only the workspace owner can create, replace or revoke the SCIM token.
Google AI OverviewsGoogle AI Mode
Questions about Proofsource and Okta
What changes in Proofsource when I connect Okta?
Everyone with an email on the verified domain signs in through Okta instead of an email code, and first-time people join your workspace automatically on the role you chose, Member or Viewer. Nothing changes about your brands, scans or reports.
Who can set up single sign-on?
Only a workspace owner or admin can see and change it, and every change asks them to confirm it is really them. Members see a short explanation instead of an error.
What does Proofsource need from Okta?
Proofsource needs your Okta SAML metadata URL or XML, or an issuer, client ID and client secret for OpenID Connect. For provisioning it gives you a SCIM base URL and a bearer token that only the workspace owner can create, replace or revoke. No Okta passwords are shared with Proofsource.
How do groups in Okta map to Proofsource roles?
In Provisioning, add a group name exactly as Okta spells it and choose Admin, Member, Viewer, Client viewer or Product viewer. Once any group is mapped, each person gets the highest role among their groups, or Member if they are in none. Owners are never changed, and no group can make someone an owner.
How do I turn it off?
Open Settings, Single sign-on, and use Turn off to pause the connection or Remove to delete it. Your team goes back to signing in with an email code, and nobody loses their workspace or their history.
Is single sign-on available on every workspace?
Yes. Single sign-on is live and open to every workspace. An owner or admin turns it on in Settings, Single sign-on.
How does single sign-on help my AI visibility work?
It gets the right people into Proofsource without friction, so fixes get approved, shipped and verified faster across ChatGPT, Perplexity, Claude and the other engines. Roles keep approvers, writers and clients in the lanes you set.
Which AI engines does Proofsource check?
Up to 10 depending on your plan: ChatGPT, Perplexity, Claude, Google AI Overviews, Google AI Mode, Gemini, Microsoft Copilot, Grok, DeepSeek and Meta AI. The free scan and trial run four.
Pairs well with Okta
Put Okta to work for your AI visibility.
Scan your brand, connect Okta, and see what AI says about you on up to 10 engines.
Google AI OverviewsGoogle AI Mode