You can assign an Okta application in both groups and individual people. Codefresh will only sync people that are inside teams. Newly created people in Okta that are_not_ assigned in a team will**NOT** be synced to Codefresh. You should assign them to a team first and then they will be synced as part of team.

There are two ways that you can setup automatic syncing of teams.

First you can create a Codefresh pipeline the runs the CLI command`codefresh synchronize teams my-okta-client-name -t okta` as explained in the[pipeline sync page]({{site.baseurl}}/docs/administration/single-sign-on/sso-setup-oauth2/#syncing-of-teams-after-initial-sso-setup).

Alternatively, you can setup completely automated syncing by enabling the auto-sync toggle found in the top right of the integration:

{% include image.html

lightbox="true"

file="/images/administration/sso/okta/auto-group-sync.png"

url="/images/administration/sso/okta/auto-group-sync.png"

alt="Automatic team syncing"

caption="Automatic team syncing"

max-width="50%"

%}

If you enable this, every 12 hours Codefresh will sync teams on its own without the need of a pipeline.

See the[overview page]({{site.baseurl}}/docs/administration/single-sign-on/sso-setup-oauth2/#testing-your-identity-provider) on how to test the integration, activate SSO for collaborators and create sync jobs.

url="/images/administration/sso/azure/client-name.png"

alt="SSO Client Name"

caption="SSO Client Name"

max-width="50%"

max-width="40%"

%}

Even though you can run this command manually it makes more sense to run it periodically as a job. And the obvious

- SLA details -[documentation]({{site.baseurl}}/docs/terms-and-privacy-policy/sla/)

- Hide inaccessible clusters in the Kubernetes dashboard -[documentation]({{site.baseurl}}/docs/deploy-to-kubernetes/manage-kubernetes/#accessing-the-kubernetes-dashboard)

- Define access for non-admins in Helm repositories and shared config -[documentation]({{site.baseurl}}/docs/configure-ci-cd-pipeline/shared-configuration/#level-of-access)

- Okta auto-sync of teams -[documentation]({{site.baseurl}}/docs/administration/single-sign-on/sso-okta/#syncing-of-teams-after-initial-sso-setup)