From f6c1af6664f9b6b433a3302ce5e84c04a6d00943 Mon Sep 17 00:00:00 2001 From: Calaway Date: Wed, 25 Aug 2021 10:25:53 -0600 Subject: [PATCH 1/2] Update for changes to Okta's UX Signed-off-by: Calaway <613-ccalaway@users.noreply.gitlab.fini.city> --- docs/auth/okta/provider.md | 33 ++++++++++++--------------------- 1 file changed, 12 insertions(+), 21 deletions(-) diff --git a/docs/auth/okta/provider.md b/docs/auth/okta/provider.md index da54a30add..f3eb8dd564 100644 --- a/docs/auth/okta/provider.md +++ b/docs/auth/okta/provider.md @@ -13,27 +13,18 @@ can authenticate users using Okta OpenID Connect. To add Okta authentication, you must create an Application from Okta: 1. Log into Okta (generally company.okta.com) -2. Navigation to Applications > Applications -3. Click `Add Application` -4. Click `Create New App` and select Web + OpenID Connect -5. Fill out the OpenID Connect App Integration form: - - `Application name`: Backstage (or your custom app name) - - `Login redirect URIs`: `Add URI` > - `http://localhost:7000/api/auth/okta/handler/frame` -6. Click Save -7. Under `General Settings`, click Edit and check the `Refresh Token` box -8. Click Save - -## Assign the Application - -Okta login is only permitted to those people or groups that have this new -Application **assigned**. This can be done from Okta's Directory. - -These are the steps to assign Backstage login permission to **everyone**: - -1. Navigate to Directory > Groups on Okta -2. Click on the `Everyone` group -3. Click `Manage Apps` and then `Assign` next to Backstage +2. Navigate to Menu >> Applications >> Applications >> `Create App Integration` +4. Fill out the Create a new app integration form: + - `Sign-in method`: `OIDC - OpenID Connect` + - `Application type`: `Web Application` + - Click Next +6. Fill out the New Web App Integration form: + - `App integration name`: `Backstage` (or your custom app name) + - `Grant type`: `Authorization Code` & `Refresh Token` + - `Sign-in redirect URIs`: `http://localhost:7000/api/auth/okta/handler/frame` + - `Sign-out redirect URIs`: `http://localhost:7000` + - `Controlled access`: (select as appropriate) + - Click Save # Configuration From 69e387a169e70d32ea53c714fdb462f814610261 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fredrik=20Adel=C3=B6w?= Date: Thu, 16 Sep 2021 19:36:37 +0200 Subject: [PATCH 2/2] fixup MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Fredrik Adelöw --- docs/auth/okta/provider.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/auth/okta/provider.md b/docs/auth/okta/provider.md index f3eb8dd564..bbd23a1b2a 100644 --- a/docs/auth/okta/provider.md +++ b/docs/auth/okta/provider.md @@ -14,14 +14,15 @@ To add Okta authentication, you must create an Application from Okta: 1. Log into Okta (generally company.okta.com) 2. Navigate to Menu >> Applications >> Applications >> `Create App Integration` -4. Fill out the Create a new app integration form: +3. Fill out the Create a new app integration form: - `Sign-in method`: `OIDC - OpenID Connect` - `Application type`: `Web Application` - Click Next -6. Fill out the New Web App Integration form: +4. Fill out the New Web App Integration form: - `App integration name`: `Backstage` (or your custom app name) - `Grant type`: `Authorization Code` & `Refresh Token` - - `Sign-in redirect URIs`: `http://localhost:7000/api/auth/okta/handler/frame` + - `Sign-in redirect URIs`: + `http://localhost:7000/api/auth/okta/handler/frame` - `Sign-out redirect URIs`: `http://localhost:7000` - `Controlled access`: (select as appropriate) - Click Save