Okta

The following steps will get you the values necessary to integrate Okta with your Barrier-protected content.

1. Go to the Applications section of your Okta admin app. (hint: the url of the admin app is https://<your organization>>-admin.okta.com/dev/console)

2. Click Add Application

3. On the Create New Application page, choose Web and click Next

4. You will need to enter some details about the application:

   • Name: <your barrier-protected site name>

   • Base URIs: https://<your barrier-protected domain>/

     • or http://localhost:8000 during development)

   • Login redirect URIs: https://<your barrier-protected domain>/oidc/callback

     • or http://localhost:8000/oidc/callback, & http://localhost:5000/oidc/callback during development

   • Group Assigments: Everyone is fine, unless you have specific requirements.

   • Grant Type Allowed:

     • Client acting on behalf of itself

       • [ ] Client Credentials

     • Client acting on behalf of a user

       • [x] Authorization Code

       • [ ] Refresh Token

       • [ ] Implicit (Hybrid)

5. Click Next again

6. You’re now at the General Settings for your new Okta integration, scroll to the bottom and copy the Client ID and Client secret values.

7. Visit the Dashboard page and copy the Org URL.

8. Use the following guide to set your environment variables [1] :

   • BARRIER_CLIENT_ID = Client ID

   • BARRIER_CLIENT_SECRET = Client secret

   • BARRIER_AUTH_URI = <Org URL>/oauth2/default/v1/authorize

   • BARRIER_TOKEN_URI = <Org URL>/oauth2/default/v1/token

   • BARRIER_ISSUER = <Org URL>/oauth2/default

   • BARRIER_USERINFO_URI = <Org URL>/oauth2/default/userinfo

9. Congratulations! You’re ready to install or deploy!

Required

Optional