Update for changes to Okta's UX

Signed-off-by: Calaway <613-ccalaway@users.noreply.gitlab.fini.city>
This commit is contained in:
Calaway
2021-08-25 10:25:53 -06:00
committed by Calaway
parent 56223de429
commit f6c1af6664
+12 -21
View File
@@ -13,27 +13,18 @@ can authenticate users using Okta OpenID Connect.
To add Okta authentication, you must create an Application from Okta:
1. Log into Okta (generally company.okta.com)
2. Navigation to Applications > Applications
3. Click `Add Application`
4. Click `Create New App` and select Web + OpenID Connect
5. Fill out the OpenID Connect App Integration form:
- `Application name`: Backstage (or your custom app name)
- `Login redirect URIs`: `Add URI` >
`http://localhost:7000/api/auth/okta/handler/frame`
6. Click Save
7. Under `General Settings`, click Edit and check the `Refresh Token` box
8. Click Save
## Assign the Application
Okta login is only permitted to those people or groups that have this new
Application **assigned**. This can be done from Okta's Directory.
These are the steps to assign Backstage login permission to **everyone**:
1. Navigate to Directory > Groups on Okta
2. Click on the `Everyone` group
3. Click `Manage Apps` and then `Assign` next to Backstage
2. Navigate to Menu >> Applications >> Applications >> `Create App Integration`
4. Fill out the Create a new app integration form:
- `Sign-in method`: `OIDC - OpenID Connect`
- `Application type`: `Web Application`
- Click Next
6. Fill out the New Web App Integration form:
- `App integration name`: `Backstage` (or your custom app name)
- `Grant type`: `Authorization Code` & `Refresh Token`
- `Sign-in redirect URIs`: `http://localhost:7000/api/auth/okta/handler/frame`
- `Sign-out redirect URIs`: `http://localhost:7000`
- `Controlled access`: (select as appropriate)
- Click Save
# Configuration