205hlab-mirrors/authentik
2
0
Fork 0
mirror of https://github.com/goauthentik/authentik.git synced 2026-06-17 19:09:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

website/docs: add okta source doc (#20296)

Browse Source 
* Begin

* Add steps

* Apply suggestions

* Update website/docs/users-sources/sources/social-logins/okta/index.md

Co-authored-by: Dominic R <dominic@sdko.org>
Signed-off-by: Dewi Roberts <dewi@goauthentik.io>

* Apply suggestion from @dominic-r

Signed-off-by: Dominic R <dominic@sdko.org>

---------

Signed-off-by: Dewi Roberts <dewi@goauthentik.io>
Signed-off-by: Dominic R <dominic@sdko.org>
Co-authored-by: Dominic R <dominic@sdko.org>
This commit is contained in:
Dewi Roberts
2026-02-17 00:45:24 +00:00
committed by GitHub
parent db62c4aaf1
commit 0d67860a64
2 changed files with 66 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
website/docs/sidebar.mjs
+1
View File
@@ -625,6 +625,7 @@ const items = [
],
},
"users-sources/sources/social-logins/mailcow/index",
"users-sources/sources/social-logins/okta/index",
"users-sources/sources/social-logins/plex/index",
"users-sources/sources/social-logins/shibboleth/index",
"users-sources/sources/social-logins/telegram/index",
website/docs/users-sources/sources/social-logins/okta/index.md
+65
View File
@@ -0,0 +1,65 @@
---
title: Okta
description: "Integrate Okta as a source in authentik"
tags: [source, okta]
---
Allows users to authenticate using their Okta credentials by configuring Okta as a federated identity provider via OAuth2.
## Preparation
The following placeholders are used in this guide:
- `authentik.company` is the FQDN of the authentik installation.
- `company.okta.com` is the FQDN of your Okta tenant.
## Okta configuration
To integrate Okta with authentik you will need to create an App Integration in the Okta Admin Console.
1. Log in to the Okta Admin Console as an administrator.
2. Navigate to **Applications** > **Applications** > **Add App Integration**.
3. Select **OIDC - OpenID Connect**, set **Application Type** to **Web Application**, and then click **Next**.
4. Configure the following required settings:
- **App Integration Name**: `authentik`
- **Sign-in redirect URIs**: `https://authentik.company/source/oauth/callback/<source_slug>/`
- Under **Assignments**, select how you'd like to control access to authentik. **Allow everyone in your organization to access** or select a group to limit access.
5. Click **Save**.
6. Under **Client Credentials**, take note of the **Client ID**. This value will be required in the next section.
7. Under **CLIENT SECRETS**, click the **Copy to clipboard** next to the secret and take note of the value, it will also be required in the next section.
## authentik configuration
To support the integration of Okta with authentik, you need to create an Okta OAuth source in authentik.
1. Log in to authentik as an administrator and open the authentik Admin interface.
2. Navigate to **Directory** > **Federation and Social login**, click **Create**, and then configure the following settings:
- **Select type**: select **Okta OAuth Source** as the source type.
- **Create Okta OAuth Source**: provide a name, a slug which must match the slug used in the Okta Sign-in redirect URI field (e.g. `okta`), and the following required settings:
- Under **Protocol settings**:
- **Consumer key**: paste the **Client ID** from Okta
- **Consumer secret**: paste the **Secret** from Okta
- Under **URL settings**:
- **Authorization URL**: `https://company.okta.com/oauth2/v1/authorize`
- **Access Token URL**: `https://company.okta.com/oauth2/v1/token`
- **Profile URL**: `https://company.okta.com/oauth2/v1/userinfo`
- **OIDC Well-known URL**: `https://company.okta.com/.well-known/openid-configuration`
- **OIDC JWKS URL**: `https://company.okta.com/oauth2/v1/keys`
3. Click **Finish** to save your settings.
:::info Display new source on login screen
For instructions on how to display the new source on the authentik login page, refer to the [Add sources to default login page documentation](../../index.md#add-sources-to-default-login-page).
:::
:::info Embed new source in flow :ak-enterprise
For instructions on embedding the new source within a flow, such as an authorization flow, refer to the [Source Stage documentation](../../../../../add-secure-apps/flows-stages/stages/source/).
:::
## Source property mappings
Source property mappings allow you to modify or gather extra information from sources. See the [overview](../../property-mappings/index.md) for more information.
## Resources
- [Okta Developer Documentation - Create an app integration](https://developer.okta.com/docs/guides/create-an-app-integration/openidconnect/main/)