If a user tries to log in to CommCare HQ and is authenticated with Okta, the password field will disappear, and the Okta SSO button will be visible.
If a user tries to log in to CommCare HQ and is not authenticated with Okta, they will be redirected to the Okta log-in screen.
If a user is authenticated with Okta but doesn’t exist in CommCare HQ, an account will be created for them when they sign in for the first time. They will see the generic landing page after logging in.
If they have an invitation to a Project, they will see the invitation on the landing page.
If a user tries to sign in to CommCare HQ and is not assigned to the Application in Okta, they will see this error message.