Merge pull request #6959 from calaway/patch-1

Update documentation for changes to Okta's UX
This commit is contained in:
Fredrik Adelöw
2021-09-16 19:45:06 +02:00
committed by GitHub
+12 -20
View File
@@ -13,27 +13,19 @@ can authenticate users using Okta OpenID Connect.
To add Okta authentication, you must create an Application from Okta:
1. Log into Okta (generally company.okta.com)
2. Navigation to Applications > Applications
3. Click `Add Application`
4. Click `Create New App` and select Web + OpenID Connect
5. Fill out the OpenID Connect App Integration form:
- `Application name`: Backstage (or your custom app name)
- `Login redirect URIs`: `Add URI` >
2. Navigate to Menu >> Applications >> Applications >> `Create App Integration`
3. Fill out the Create a new app integration form:
- `Sign-in method`: `OIDC - OpenID Connect`
- `Application type`: `Web Application`
- Click Next
4. Fill out the New Web App Integration form:
- `App integration name`: `Backstage` (or your custom app name)
- `Grant type`: `Authorization Code` & `Refresh Token`
- `Sign-in redirect URIs`:
`http://localhost:7000/api/auth/okta/handler/frame`
6. Click Save
7. Under `General Settings`, click Edit and check the `Refresh Token` box
8. Click Save
## Assign the Application
Okta login is only permitted to those people or groups that have this new
Application **assigned**. This can be done from Okta's Directory.
These are the steps to assign Backstage login permission to **everyone**:
1. Navigate to Directory > Groups on Okta
2. Click on the `Everyone` group
3. Click `Manage Apps` and then `Assign` next to Backstage
- `Sign-out redirect URIs`: `http://localhost:7000`
- `Controlled access`: (select as appropriate)
- Click Save
# Configuration