Questions tagged [okta]

Identity and mobility management.

Filter by
Sorted by
Tagged with
46 votes
4 answers
160k views

How to downgrade python version from 3.8 to 3.7 (mac)

I'm using Python & okta-aws tools and in order to fetch correct credentials on aws I need to run okta-aws init. But got an error message of Could not read roles from Okta and the system prompted ...
user13902742's user avatar
23 votes
1 answer
8k views

Skip SignIn page with next-auth.js to go directly to provider

I am using Okta with next-auth.js. Since I'm only using 1 providers (I will be using more providers inside Okta login), may I just skip this page and go directly to Okta login page? If yes, how?
Boubou's user avatar
  • 642
15 votes
1 answer
6k views

Keycloak: How to auto redirect Keycloak user to OKTA SSO page instead of clicking on button?

I have followed the guide https://ultimatesecurity.pro/post/okta-saml/ , to configure OKTA Saml with keycloak. After this configuration, I see Okta/saml login button on login page, clicking on which, ...
tryingToLearn's user avatar
12 votes
4 answers
9k views

How to calculate PCKE's code_verifier?

I'm going through Okta's PCKE Flow demo to get a better understanding of how it works, and I'm having trouble reproducing the same code_challenge hash that's being generated from the code_verifier. ...
burnt1ce's user avatar
  • 14.5k
12 votes
1 answer
23k views

CAS vs Okta Vs Keycloak comparisions as an SSO solution

Which is the best option for SSO implementation Keycloack Vs CAS Vs Okta? I'm specifically looking for the disadvantages of each service to identify the best suitability for my system.
Sachin Arora's user avatar
11 votes
1 answer
1k views

Okta SCIM Deprovisioning via PUT method?

Our backend server doesn't support HTTP PATCH method (only PUT). As the result we cannot properly Unassign User from SCIM app. When I try Unassign User, Okta SCIM seems make PATCH request (not PUT). ...
Andrii Furmanets's user avatar
11 votes
3 answers
6k views

OpenID Okta initiated login `AuthSdkError: Unable to parse a token from the url`

Im follow the react-hosted-login sample project here: https://github.com/okta/samples-js-react/tree/master/okta-hosted-login I created my application in okta like so: I configured the react-sample ...
Krimson's user avatar
  • 7,406
10 votes
1 answer
13k views

Getting list of groups user is associated with in Okta

I'm trying to integrate with Okta SSO by implementing SAML 2.0 in my website as Service Provider (SP) and Okta env. as my Identity Provider (IDP) I can't understand how to configure my IDP to return ...
buddy123's user avatar
  • 5,679
10 votes
1 answer
7k views

UseJwtBearerAuthentication signing key

I'm trying to implement the JWT Bearer Authentication in my AspNetCore MVC app (Web API only) using the JwtBearerMiddleware but am getting a 401 response with header: WWW-Authenticate: Bearer error="...
Steve's user avatar
  • 1,594
10 votes
1 answer
3k views

Okta Authentication, Cannot GET /implicit/callback

I'm following this guide https://developer.okta.com/quickstart/ to add authentication to my React App. I've set everything as per the guide, and I get the id token from the demo preview site. The log ...
Salmaan P's user avatar
  • 817
9 votes
2 answers
9k views

Should dynamic query parameters be present in the Redirection URI for an OAuth2 (Autorization Code Grant Type)

Sources such as this Okta sponsored site (see "Per-Request Customization" section) mention that the redirect_uri parameter of a autorization request SHOULD NEVER have a dynamic query part (ex: for ...
GhislainCote's user avatar
  • 1,502
9 votes
1 answer
10k views

How can I log into an Okta enabled site using curl?

I'm trying to use curl to log into an Okta-enabled site providing the user name & password using the parameter -u {username:password} and all I get back is the html content of the Okta redirect ...
nsierraj's user avatar
  • 111
9 votes
2 answers
6k views

How do I configure Spring Security SAML to work with Okta?

I'm trying to make spring-boot-security-saml-sample application work with Okta. To add Okta as a provider, I've made the following changes to WebSecurityConfig.java: https://gist.github.com/mraible/...
Matt Raible's user avatar
  • 8,223
8 votes
1 answer
2k views

JWT set did not contain any usable keys

While setting up Auth0 authentication with our okta application from fastapi, we received the following error, jwt.exceptions.PyJWKSetError: The JWK Set did not contain any usable keys We followed ...
Harris Minhas's user avatar
8 votes
5 answers
7k views

how to test/mock out react hooks?

Recently I upgrade the okta-react library and have transitioned the app to use the new hooks. I am updating my tests now. useOktaAuth() is undefined. I want to be able to mock it out so I can test ...
huihuihui's user avatar
  • 189
8 votes
3 answers
8k views

How can I get all groups a user belongs to using Okta's API?

I'm trying to sync users/groups that sit behind Okta in Active Directory. Specifically, I'd like to get all groups a user belongs to, upon login to a third party application. Looking at the Okta API ...
danvalencia's user avatar
8 votes
2 answers
4k views

Connecting in a Linux box to AWS-VPN using OKTA Push Authentication

First of all, a rookie, related to VPN/Security issues, so really forgive me for whatever error I make while describing my problem, and hope I'm able to make it clear. Our contractors changed AVIATRIX-...
tonio's user avatar
  • 484
8 votes
1 answer
3k views

spring-security-oauth2 JwkTokenStore with custom user details service

I've a rich web (react based) front end application that sends request to a backend ResourceServer application. The requests are sent with JWT in the header for authentication. My setup does ...
Amit Kapoor's user avatar
8 votes
1 answer
6k views

Add Custom AuthenticationProvider to Spring Boot + oauth +oidc

I've developed a basic oauth/oidc example using SpringBoot 2.1.7 with Okta providing authentication services. Here is my Gradle dependency setup for reference: plugins { id 'org.springframework.boot'...
Jim Kennedy's user avatar
7 votes
1 answer
4k views

Okta introspect method returning bad request

trying to post to the introspect method is throwing a bad request error: "Bad request. Accept and/or Content-Type headers likely do not match supported values." here is the url I am hitting .....
twaldron's user avatar
  • 2,722
7 votes
2 answers
8k views

How to set up Okta as SAML IDP in AWS Cognito User Pool?

I will want to use Okta as SAML 2.0 based IDP, AWS Cognito as service provider, and Cognito user pool to have federated IDP configuration. I have followed all the steps mentioned in AWS sites listed ...
Martin's user avatar
  • 190
7 votes
5 answers
3k views

Okta Sign-in widget breaks Jest tests - TypeError: Cannot read property 'backingStorePixelRatio' of null

As in the title. Found this issue on Okta dev forums https://devforum.okta.com/t/okta-sign-in-widget-breaks-neutrino-jest-tests/2874 where the author mentions that adding canvas-prebuiltnpm package ...
codeepic's user avatar
  • 3,783
7 votes
1 answer
2k views

Spring Security SAML Assertion to Roles conversion

I have been using SAML 2.0 with Spring Boot 2.5.6 using Okta as the Identity Provider. For the most part, I have been able to create a Web Application and integrate with Okta's Identity provider. The ...
Viraj Shetty's user avatar
7 votes
4 answers
4k views

What's a good way to obtain STS credentials with a SAML federated login via Okta for use in local command line tools?

The Amazon Web Services API provides the AssumeRoleWithSAML endpoint to allow a user to exchange a SAML assertion for a set of temporary API credentials from the AWS Security Token Service. A SAML ...
gene_wood's user avatar
  • 1,970
7 votes
1 answer
4k views

Selenium testing : How to bypass okta in selenium

We have recently implemented okta into our application. Whenever the user wants to login it will ask for an okta code which will keep on changing every 30 seconds, but while running selenium how ...
Ravikiran Jakkannavar's user avatar
7 votes
0 answers
2k views

Experiences with migraton from OKTA to Azure AD

I'm wondering if anybody can share some practical experience here: I have a client making extensive use of the OKTA identity solution for single sign-on to various cloud/web applications (both ...
A de Koning's user avatar
7 votes
1 answer
1k views

Safari's "Prevent cross-site tracking" breaks several Okta features (due to okta session not being created)

I'm using the okta sign-in widget to authenticate users within our application. The issue is that when 'prevent cross-site tracking' is checked within Safari (FF has a similar setting), login still ...
Matt's user avatar
  • 4,425
6 votes
2 answers
5k views

How to configure and get custom attribute in okta with saml2.0

I am using okta as idp in my application, I want to configure custom attribute eg: ID, how can be done in okta? and how to set those values in okta?
user3773610's user avatar
6 votes
1 answer
5k views

How to resolve a CORS error on OKTA Hosted Signout

I'm trying to add OKTA to my React application. I've gotten sign-in to work fine. But I'm struggling with Signout. Setup: I added OKTA to my project following these instructions from OKTA. This mostly ...
GridDragon's user avatar
  • 2,867
6 votes
1 answer
2k views

Android SSO Okta Integration Example

Don't know a lot about Okta and Android. Does anyone know of a good tutorial which shows how to wire an android application into the Okta framework. Or do I implement a SAML SSO implementation and ...
Stephen McCormick's user avatar
6 votes
1 answer
2k views

OKTA Sign-In Widget MFA

I found an tutorial to build an Angular 4 app with OKTA's Sign-in Widget. It is great, I recommend it for anyone who's new to OKTA. You can find it at this URL: https://developer.okta.com/blog/2017/...
RPeralta's user avatar
6 votes
3 answers
16k views

Error validating SAML message

i'm trying Okta quick start for Java tomcat SAML, I am very new to this topic. When I start my test application I do see a link to Okta IDP, after clicking "Start single sign-on" button i am being ...
ZaCk1231's user avatar
6 votes
2 answers
11k views

Okta IDP Initiated RelayState

Can anyone tell me how to pass RelayState for an IDP initiated SSO connection. We have the SSO working but would like to deep link to a page within the service provider's application. They have ...
Todd's user avatar
  • 1,461
6 votes
1 answer
3k views

Chrome Custom Tabs Initial Okta Auth Not Redirecting Back

I'm in the process of implementing SSO on an Android app in which we're using Okta for the identity management while in development. We have Okta set up so that, after the a successful user/password ...
SBerg413's user avatar
  • 14.5k
6 votes
2 answers
1k views

Configure Okta to Mediate between our SP Application and IdP

We are a Service Provider who has SAML enabled our app to allow for IdPs to authenticate users for us. To make sure everyone is on the same page Identity Provider (IdP) is an application whose job it ...
Stengel's user avatar
  • 61
6 votes
0 answers
613 views

how to protect an API in fastapi using SAML SSO

I am writing a fastapi web app which gets authenticated using OKTA iDP with SAML 2.0 SSO. I want to protect my APIs in web app. I know fastapi has only Oauth2/token based API protection instead of ...
myquest4 sh's user avatar
6 votes
0 answers
2k views

upgrade from spring-security-saml2-core to Spring Security SAML2 service provider

We are using spring-security-saml2-core for SSO Okta Integration for the web application. GitHub: https://github.com/spring-projects/spring-security-saml This project is in maintenance mode and will ...
Madhusudana's user avatar
6 votes
2 answers
3k views

Initialising Okta Signin Widget a second time in a single-page webapp throws exception

We are integrating the Okta Sign-in Widget into our React-based webapp. The example snippet: var oktaSignIn = new OktaSignIn({baseUrl: baseUrl}); oktaSignIn.renderEl(...) Works fine for us when ...
Ian Su's user avatar
  • 261
5 votes
3 answers
4k views

"SignatureError: Failed to verify signature" - Okta, pySAML2

For three days, I have been pulling my hair out trying to wrap my head around Okta & SAML. On my local machine (OSX Mavericks), I am able to successfully follow the steps listed here: http://...
Ryan Martin's user avatar
  • 1,613
5 votes
1 answer
5k views

OpenID Connect from Swagger UI with PKCE and Okta in .Net Core

After stepping around controller authorization in the debugger for the past 4 weeks, I finally decided to tackle OpenID Connect authentication in my Swashbuckle-supported .NetCore 5 API. I wish I hadn'...
cdonner's user avatar
  • 37.1k
5 votes
2 answers
3k views

How to get a SAML Response from OKTA for unit/integration testing

I am working on project where they are authenticating via SAML from OKTA. I have successfully got the integration working where a SAMLResponse sent (via POST method) to the website. In true TDD ...
Ty Seddon's user avatar
  • 111
5 votes
2 answers
1k views

Getting a Refresh Token from NextAuth Okta Provider

We have an existing application use NextAuth to communicate with Okta. This is all working fine, we've just added an API which needs the Okta Access Token, we've used the JWT callback in NextAuth to ...
Paul Hadfield's user avatar
5 votes
3 answers
3k views

Okta not returning custom claims in tokens

I just signed up for a dev test account with Okta to test OIDC using Okta's auth service and user management. Using their management portal, I created a second group called Test Group along with the ...
RHarris's user avatar
  • 10.5k
5 votes
2 answers
6k views

How to ensure make my custom OidcUserService called over the default?

tl;dr: why isn't my OidcUserService despite being registered? I am trying to use my own OAuth2UserService by registering it as documented in the Spring Security documentation. However, when I put a ...
Sled's user avatar
  • 18.6k
5 votes
2 answers
4k views

Okta unable to access jenkins server

I integrated jenkins with Okta using SAML2.0 plugin. Issue: When i click on jenkins app in the OKTA url it is redirecting request to https://jenkins.xxxx.com/samlLogout/ and displaying message "You ...
naveen's user avatar
  • 83
5 votes
2 answers
2k views

SSO : Should SP validate session with IDP in every request

As per SP initiated SSO flow, User tries to access SP. Since the user is unauthenticated, he is redirected to IDP where he enters his credentials, post successful login, IDP sets cookies in user's ...
Saurabh Agrawal's user avatar
5 votes
2 answers
4k views

Snowflake Python Okta Connection

I am trying python connection to snowflake using snowflake.connector library along with OKTA authentication. I am using the following code to execute but getting error: Failed to execute request: ...
Varun Singhal's user avatar
5 votes
0 answers
2k views

How to use oidc (OpenIDConnect object) in flask.Blueprint when using flask.create_app?

I want to use @oidc.require_login to redirect login request to okta. I get AttributeError: '_AppCtxGlobals' object has no attribute 'oidc_id_token' error which I am unable to resolve 1) I built an ...
Yuva Athur's user avatar
5 votes
1 answer
18k views

Getting net::ERR_UNKNOWN_URL_SCHEME error

I am trying to open a android application from javascript. If the android application is installed in android mobile, it opens required application. But if android application is not installed, it ...
Swathi Delampady's user avatar
5 votes
1 answer
2k views

How does Azure Active Directory support federation with Okta as an IDP?

Is it possible to integrate Okta as an IDP (Identity Provider) for an application in Azure, where Azure would be the Service Provider? Presently the authentication is managed by Azure AD, we have AD ...
sponturious's user avatar

1
2 3 4 5
34