Okta

Okta Setup

Follow the Okta developer guide to create an Okta application or use an existing one.

Steps

1. Create an Okta Developer Account (if not already available) at https://developer.okta.com/signup/.
2. Create an Application:
   • Choose "Web Application" as the Application Type.
   • Skip adding the Sign-in redirect URI for now; it can be added later after deploying the TrueFoundry service.
3. Save the following details:
   • Client ID
   • Client Secret
   • Okta Domain (e.g., https://dev-123456.okta.com)
4. Open the OpenID Configuration:
   • Example:

     https://dev-123456.okta.com/.well-known/openid-configuration

   • This contains required fields like:
     • Issuer
     • JWKS URI
     • Authorization URL
     • Token URL
     • Supported Scopes

Integration with TrueFoundry

• Use the values from the OpenID configuration in the integration.
• For Client Secret, you can:
  • Create a TrueFoundry Secret, or
  • Directly add the value.
• Include appropriate scopes as required for your integration (e.g., offline_access, openid, email, etc.).
• Retain JWT Source as Access Token (no changes needed).

Example configuration