Questions tagged [okta]
Identity and mobility management.
1,677
questions
46
votes
4
answers
160k
views
How to downgrade python version from 3.8 to 3.7 (mac)
I'm using Python & okta-aws tools and in order to fetch correct credentials on aws I need to run okta-aws init. But got an error message of Could not read roles from Okta and the system prompted ...
23
votes
1
answer
8k
views
Skip SignIn page with next-auth.js to go directly to provider
I am using Okta with next-auth.js. Since I'm only using 1 providers (I will be using more providers inside Okta login), may I just skip this page and go directly to Okta login page? If yes, how?
15
votes
1
answer
6k
views
Keycloak: How to auto redirect Keycloak user to OKTA SSO page instead of clicking on button?
I have followed the guide https://ultimatesecurity.pro/post/okta-saml/ , to
configure OKTA Saml with keycloak. After this configuration, I see
Okta/saml login button on login page, clicking on which, ...
12
votes
4
answers
9k
views
How to calculate PCKE's code_verifier?
I'm going through Okta's PCKE Flow demo to get a better understanding of how it works, and I'm having trouble reproducing the same code_challenge hash that's being generated from the code_verifier. ...
12
votes
1
answer
23k
views
CAS vs Okta Vs Keycloak comparisions as an SSO solution
Which is the best option for SSO implementation Keycloack Vs CAS Vs Okta? I'm specifically looking for the disadvantages of each service to identify the best suitability for my system.
11
votes
1
answer
1k
views
Okta SCIM Deprovisioning via PUT method?
Our backend server doesn't support HTTP PATCH method (only PUT). As the result we cannot properly Unassign User from SCIM app.
When I try Unassign User, Okta SCIM seems make PATCH request (not PUT).
...
11
votes
3
answers
6k
views
OpenID Okta initiated login `AuthSdkError: Unable to parse a token from the url`
Im follow the react-hosted-login sample project here: https://github.com/okta/samples-js-react/tree/master/okta-hosted-login
I created my application in okta like so:
I configured the react-sample ...
10
votes
1
answer
13k
views
Getting list of groups user is associated with in Okta
I'm trying to integrate with Okta SSO by implementing SAML 2.0 in my website as Service Provider (SP) and Okta env. as my Identity Provider (IDP)
I can't understand how to configure my IDP to return ...
10
votes
1
answer
7k
views
UseJwtBearerAuthentication signing key
I'm trying to implement the JWT Bearer Authentication in my AspNetCore MVC app (Web API only) using the JwtBearerMiddleware but am getting a 401 response with header:
WWW-Authenticate: Bearer error="...
10
votes
1
answer
3k
views
Okta Authentication, Cannot GET /implicit/callback
I'm following this guide https://developer.okta.com/quickstart/ to add authentication to my React App. I've set everything as per the guide, and I get the id token from the demo preview site. The log ...
9
votes
2
answers
9k
views
Should dynamic query parameters be present in the Redirection URI for an OAuth2 (Autorization Code Grant Type)
Sources such as this Okta sponsored site (see "Per-Request Customization" section) mention that the redirect_uri parameter of a autorization request SHOULD NEVER have a dynamic query part (ex: for ...
9
votes
1
answer
10k
views
How can I log into an Okta enabled site using curl?
I'm trying to use curl to log into an Okta-enabled site providing the user name & password using the parameter -u {username:password} and all I get back is the html content of the Okta redirect ...
9
votes
2
answers
6k
views
How do I configure Spring Security SAML to work with Okta?
I'm trying to make spring-boot-security-saml-sample application work with Okta. To add Okta as a provider, I've made the following changes to WebSecurityConfig.java:
https://gist.github.com/mraible/...
8
votes
1
answer
2k
views
JWT set did not contain any usable keys
While setting up Auth0 authentication with our okta application from fastapi, we received the following error,
jwt.exceptions.PyJWKSetError: The JWK Set did not contain any usable keys
We followed ...
8
votes
5
answers
7k
views
how to test/mock out react hooks?
Recently I upgrade the okta-react library and have transitioned the app to use the new hooks. I am updating my tests now. useOktaAuth() is undefined. I want to be able to mock it out so I can test ...
8
votes
3
answers
8k
views
How can I get all groups a user belongs to using Okta's API?
I'm trying to sync users/groups that sit behind Okta in Active Directory. Specifically, I'd like to get all groups a user belongs to, upon login to a third party application.
Looking at the Okta API ...
8
votes
2
answers
4k
views
Connecting in a Linux box to AWS-VPN using OKTA Push Authentication
First of all, a rookie, related to VPN/Security issues, so really
forgive me for whatever error I make while describing my problem,
and hope I'm able to make it clear.
Our contractors changed AVIATRIX-...
8
votes
1
answer
3k
views
spring-security-oauth2 JwkTokenStore with custom user details service
I've a rich web (react based) front end application that sends request to a backend ResourceServer application. The requests are sent with JWT in the header for authentication. My setup does ...
8
votes
1
answer
6k
views
Add Custom AuthenticationProvider to Spring Boot + oauth +oidc
I've developed a basic oauth/oidc example using SpringBoot 2.1.7 with Okta providing authentication services. Here is my Gradle dependency setup for reference:
plugins {
id 'org.springframework.boot'...
7
votes
1
answer
4k
views
Okta introspect method returning bad request
trying to post to the introspect method is throwing a bad request error:
"Bad request. Accept and/or Content-Type headers likely do not match supported values."
here is the url I am hitting
.....
7
votes
2
answers
8k
views
How to set up Okta as SAML IDP in AWS Cognito User Pool?
I will want to use Okta as SAML 2.0 based IDP, AWS Cognito as service provider, and Cognito user pool to have federated IDP configuration.
I have followed all the steps mentioned in AWS sites listed ...
7
votes
5
answers
3k
views
Okta Sign-in widget breaks Jest tests - TypeError: Cannot read property 'backingStorePixelRatio' of null
As in the title.
Found this issue on Okta dev forums https://devforum.okta.com/t/okta-sign-in-widget-breaks-neutrino-jest-tests/2874 where the author mentions that adding canvas-prebuiltnpm package ...
7
votes
1
answer
2k
views
Spring Security SAML Assertion to Roles conversion
I have been using SAML 2.0 with Spring Boot 2.5.6 using Okta as the Identity Provider. For the most part, I have been able to create a Web Application and integrate with Okta's Identity provider. The ...
7
votes
4
answers
4k
views
What's a good way to obtain STS credentials with a SAML federated login via Okta for use in local command line tools?
The Amazon Web Services API provides the AssumeRoleWithSAML endpoint to allow a user to exchange a SAML assertion for a set of temporary API credentials from the AWS Security Token Service.
A SAML ...
7
votes
1
answer
4k
views
Selenium testing : How to bypass okta in selenium
We have recently implemented okta into our application.
Whenever the user wants to login it will ask for an okta code which will keep on changing every 30 seconds, but while running selenium how ...
7
votes
0
answers
2k
views
Experiences with migraton from OKTA to Azure AD
I'm wondering if anybody can share some practical experience here:
I have a client making extensive use of the OKTA identity solution for single sign-on to various cloud/web applications (both ...
7
votes
1
answer
1k
views
Safari's "Prevent cross-site tracking" breaks several Okta features (due to okta session not being created)
I'm using the okta sign-in widget to authenticate users within our application. The issue is that when 'prevent cross-site tracking' is checked within Safari (FF has a similar setting), login still ...
6
votes
2
answers
5k
views
How to configure and get custom attribute in okta with saml2.0
I am using okta as idp in my application, I want to configure custom attribute eg: ID, how can be done in okta? and how to set those values in okta?
6
votes
1
answer
5k
views
How to resolve a CORS error on OKTA Hosted Signout
I'm trying to add OKTA to my React application. I've gotten sign-in to work fine. But I'm struggling with Signout.
Setup:
I added OKTA to my project following these instructions from OKTA.
This mostly ...
6
votes
1
answer
2k
views
Android SSO Okta Integration Example
Don't know a lot about Okta and Android. Does anyone know of a good tutorial which shows how to wire an android application into the Okta framework. Or do I implement a SAML SSO implementation and ...
6
votes
1
answer
2k
views
OKTA Sign-In Widget MFA
I found an tutorial to build an Angular 4 app with OKTA's Sign-in Widget. It is great, I recommend it for anyone who's new to OKTA.
You can find it at this URL:
https://developer.okta.com/blog/2017/...
6
votes
3
answers
16k
views
Error validating SAML message
i'm trying Okta quick start for Java tomcat SAML, I am very new to this topic.
When I start my test application I do see a link to Okta IDP, after clicking "Start single sign-on" button i am being ...
6
votes
2
answers
11k
views
Okta IDP Initiated RelayState
Can anyone tell me how to pass RelayState for an IDP initiated SSO connection. We have the SSO working but would like to deep link to a page within the service provider's application. They have ...
6
votes
1
answer
3k
views
Chrome Custom Tabs Initial Okta Auth Not Redirecting Back
I'm in the process of implementing SSO on an Android app in which we're using Okta for the identity management while in development. We have Okta set up so that, after the a successful user/password ...
6
votes
2
answers
1k
views
Configure Okta to Mediate between our SP Application and IdP
We are a Service Provider who has SAML enabled our app to allow for IdPs to authenticate users for us. To make sure everyone is on the same page
Identity Provider (IdP) is an application whose job it ...
6
votes
0
answers
613
views
how to protect an API in fastapi using SAML SSO
I am writing a fastapi web app which gets authenticated using OKTA iDP with SAML 2.0 SSO. I want to protect my APIs in web app. I know fastapi has only Oauth2/token based API protection instead of ...
6
votes
0
answers
2k
views
upgrade from spring-security-saml2-core to Spring Security SAML2 service provider
We are using spring-security-saml2-core for SSO Okta Integration for the web application.
GitHub: https://github.com/spring-projects/spring-security-saml
This project is in maintenance mode and will ...
6
votes
2
answers
3k
views
Initialising Okta Signin Widget a second time in a single-page webapp throws exception
We are integrating the Okta Sign-in Widget into our React-based webapp.
The example snippet:
var oktaSignIn = new OktaSignIn({baseUrl: baseUrl});
oktaSignIn.renderEl(...)
Works fine for us when ...
5
votes
3
answers
4k
views
"SignatureError: Failed to verify signature" - Okta, pySAML2
For three days, I have been pulling my hair out trying to wrap my head around Okta & SAML.
On my local machine (OSX Mavericks), I am able to successfully follow the steps listed here: http://...
5
votes
1
answer
5k
views
OpenID Connect from Swagger UI with PKCE and Okta in .Net Core
After stepping around controller authorization in the debugger for the past 4 weeks, I finally decided to tackle OpenID Connect authentication in my Swashbuckle-supported .NetCore 5 API. I wish I hadn'...
5
votes
2
answers
3k
views
How to get a SAML Response from OKTA for unit/integration testing
I am working on project where they are authenticating via SAML from OKTA. I have successfully got the integration working where a SAMLResponse sent (via POST method) to the website.
In true TDD ...
5
votes
2
answers
1k
views
Getting a Refresh Token from NextAuth Okta Provider
We have an existing application use NextAuth to communicate with Okta. This is all working fine, we've just added an API which needs the Okta Access Token, we've used the JWT callback in NextAuth to ...
5
votes
3
answers
3k
views
Okta not returning custom claims in tokens
I just signed up for a dev test account with Okta to test OIDC using Okta's auth service and user management.
Using their management portal, I created a second group called Test Group along with the ...
5
votes
2
answers
6k
views
How to ensure make my custom OidcUserService called over the default?
tl;dr: why isn't my OidcUserService despite being registered?
I am trying to use my own OAuth2UserService by registering it as documented in the Spring Security documentation.
However, when I put a ...
5
votes
2
answers
4k
views
Okta unable to access jenkins server
I integrated jenkins with Okta using SAML2.0 plugin.
Issue: When i click on jenkins app in the OKTA url it is redirecting request to https://jenkins.xxxx.com/samlLogout/ and displaying message "You ...
5
votes
2
answers
2k
views
SSO : Should SP validate session with IDP in every request
As per SP initiated SSO flow, User tries to access SP. Since the user is unauthenticated, he is redirected to IDP where he enters his credentials, post successful login, IDP sets cookies in user's ...
5
votes
2
answers
4k
views
Snowflake Python Okta Connection
I am trying python connection to snowflake using snowflake.connector library along with OKTA authentication. I am using the following code to execute but getting error:
Failed to execute request: ...
5
votes
0
answers
2k
views
How to use oidc (OpenIDConnect object) in flask.Blueprint when using flask.create_app?
I want to use @oidc.require_login to redirect login request to okta. I get AttributeError: '_AppCtxGlobals' object has no attribute 'oidc_id_token' error which I am unable to resolve
1) I built an ...
5
votes
1
answer
18k
views
Getting net::ERR_UNKNOWN_URL_SCHEME error
I am trying to open a android application from javascript. If the android application is installed in android mobile, it opens required application. But if android application is not installed, it ...
5
votes
1
answer
2k
views
How does Azure Active Directory support federation with Okta as an IDP?
Is it possible to integrate Okta as an IDP (Identity Provider) for an application in Azure, where Azure would be the Service Provider?
Presently the authentication is managed by Azure AD, we have AD ...