Deployment and pre-launch checklists

Now that you've built an app, you can customize your app and get it ready to launch. This guide provides multiple checklists to help you take your app over the finish line.

Brand and customization

Ensure that your app fits your brand:

• Use a custom domain: Customize your Okta organization by replacing your Okta domain name (for example, dev-12345.okta.com) with your own domain name (for example, id.example.com) so that all URLs look like your app.
• Customize and add branding to your sign-in page: Tailor the sign-in page to fit your brand or your app's look and feel so that your user experience is consistent and seamless.
• Customize and add branding to your error pages: If an error occurs during sign-in, Okta may need to display an error page to the user. Customize the error page to match the rest of your app.
• Email domain setup: Update the "From" address and domain of the emails sent to your users.
• Customize email templates: Change the look and feel of the emails sent to users by Okta.
• Manage access to protected resources: If your app has to validate the signed tokens that are issued to end-users. Learn about this process and best practices for validating your user's tokens.

App settings

• Update the Redirect URI for your domain: If you created an Okta app that uses localhost or a test domain, you need to update your Okta app (or create one) using publicly accessible URLs.
• Configure Cross-Origin Resource Sharing (CORS): If you’re building a SPA or you’re embedding the Okta Sign-In Widget into your own app, you must configure CORS for your domain.

Note: Configuring CORS isn't required if you're using the Okta custom domain feature.

User authorization and registration

• Migrate your users in bulk: Use the Okta API to create many users with or without credentials. Make sure to sign into the Admin Console, and check out your settings for Security/General notification emails, to configure whether you want your newly imported users to receive notification emails.
• Configure Multifactor Authentication (MFA): Set up which security factors are used when users sign in.
• Set up Self-Service Registration: Allow users to sign up for an account with an email address.
• Enable Social Authentication: Allow your users to sign in with their other services.

Rate limits

• Review how Okta's rate limits work: Requests made to the Okta API have rate limits to prevent abuse.

Troubleshoot

Okta provides a set of reports and logs to help you troubleshoot user problems. These reports are available under the Reports menu.

• View activity and security reports (opens new window): Help diagnose sign-in problems for your users.
• View events in the System Log (opens new window): See all event logs in your Okta org.