diff --git a/.changeset/sharp-wombats-speak.md b/.changeset/sharp-wombats-speak.md index 1a5a8d4f19..8a6dd39354 100644 --- a/.changeset/sharp-wombats-speak.md +++ b/.changeset/sharp-wombats-speak.md @@ -2,27 +2,4 @@ '@backstage/plugin-auth-backend': patch --- -Allow additional user-defined scopes for Okta auth in config yaml - -Example `app-config.yaml` excerpt - -```yml -auth: - environment: development - providers: - okta: - development: - clientId: ${AUTH_OKTA_CLIENT_ID} - clientSecret: ${AUTH_OKTA_CLIENT_SECRET} - audience: ${AUTH_OKTA_DOMAIN} - authServerId: ${AUTH_OKTA_AUTH_SERVER_ID} # Optional - idp: ${AUTH_OKTA_IDP} # Optional - # https://developer.okta.com/docs/reference/api/oidc/#scope-dependent-claims-not-always-returned - additionalScopes: groups # Optional -``` - -- Accept a new ` additionalScopes`` option during okta creation with `createAuthProviderIntegration` -- Passes the user-defined `additionalScopes` as an option to `OktaAuthProvider` -- Add `additionalScopes` as an option for `OktaAuthProvider` -- Set `scope` in `OktaAuthProvider` to the combined value of current scopes combined with the user-defined `additionalScopes` passed as an `option` -- Update the `start` and `refresh` methods to use the new combined `scope` from `OktaAuthProvider` rather than `scope` from the request +Added an optional `additionalScopes` configuration parameter to `okta` providers, that lets you add additional scopes on top of the default ones.