Lawvek — Okta Integration Guide

Create the Lawvek app in Okta

Choose the setup method that applies to you:

Option A — Okta Integration Network (recommended)

If Lawvek is listed in your Okta app catalog:

1. In the Okta Admin Console, go to Applications → Browse App Catalog
2. Search for Lawvek and click Add Integration
3. Set the Application label (e.g. Lawvek) and click Done

Okta automatically pre-configures the redirect URIs and scopes — no manual OIDC settings required. Proceed to Step 2.

Option B — Manual Setup

If you are not using the Okta catalog, create a custom OIDC app:

1. In the Okta Admin Console, go to Applications → Create App Integration
2. Select OIDC – Web Application and click Next
3. Set the Application label (e.g. Lawvek)
4. Under Sign-in redirect URIs, add:
   https://dashboard.lawvek.ai/api/auth/sso/callback
5. Under Sign-out redirect URIs, leave blank
6. Set Controlled access to the appropriate policy for your org
7. Click Save

Note your Okta details

From the app's General tab, copy:

Your Discovery URL (needed in Step 3) is:

Configure SSO in Lawvek

1. Log in to Lawvek as an Org Admin
2. Open your organisation dashboard and click the SSO & SCIM tab
3. Click Configure SSO and fill in:

Click Save

Assign users

In the Okta app → Assignments tab:

• Click Assign → Assign to People to add individual users
• Click Assign → Assign to Groups to assign an entire group

Assigned users can now log in at dashboard.lawvek.ai by entering their work email — Lawvek automatically detects SSO and redirects them to Okta.

Create a SAML 2.0 app in Okta

1. In the Okta Admin Console, go to Applications → Create App Integration
2. Select SAML 2.0 and click Next
3. Enter the Application name (e.g. Lawvek) and click Next
4. On the Configure SAML screen, enter:

Under Advanced Settings, configure the following:

• Set Assertion Signature to Signed
• Set Signature Algorithm to RSA-SHA256

Click Next, select the appropriate options for your organization, and click Finish.

Once saved, go to the Sign On tab, click View SAML Setup Instructions under the active certificate, and copy:

• Identity Provider Issuer
• Identity Provider Single Sign-On URL
• X.509 Certificate (copy the body text only, excluding the headers/footers)

Configure SAML in Lawvek

1. Log in to Lawvek as an Org Admin
2. Go to Org Settings → SSO & SCIM
3. Click Configure SSO and select SAML 2.0
4. Paste the three copied values from Okta:
   • Identity Provider Issuer
   • Identity Provider Single Sign-On URL
   • X.509 Certificate (body only)
5. Enable Just-in-Time Provisioning if users should be auto-created on first login
6. Click Save

Assign users and test

In the Okta app, go to the Assignments tab and assign users or groups.

Then test both authentication flows:

• SP-initiated: Go to https://app.lawvek.ai/login, enter your work email. The system should redirect you to Okta and land you back on the dashboard.
• IdP-initiated: Click the Lawvek tile in your Okta portal. You should land on the Lawvek dashboard directly.

Generate a SCIM token in Lawvek

1. In Lawvek, open your organisation dashboard and click the SSO & SCIM tab
2. Scroll to SCIM Provisioning
3. Click Generate Token, enter a description (e.g. Okta production), and click Generate

The SCIM Base URL is:

Configure SCIM in Okta

In the Okta Lawvek app → Provisioning tab:

1. Click Configure API Integration
2. Check Enable API integration
3. Fill in:

Click Test API Credentials — you should see "Verified successfully", then click Save.

Enable provisioning actions

Still in the Provisioning tab → To App section, enable:

• Create Users — provisions a Lawvek account when a user is assigned
• Update User Attributes — syncs name and email changes from Okta
• Deactivate Users — revokes Lawvek access when deactivated in Okta

Click Save

Enable Group Push (optional)

To sync Okta groups as Lawvek Teams:

1. In the Okta app → Push Groups tab
2. Click Push Groups → Find groups by name
3. Search for and select the groups you want to sync
4. Click Save

Synced groups appear in Lawvek under the Teams section of your organisation dashboard.