Jahia OAuth Okta

This module is a community module to show how to implement an Okta Authentication based on OAuth protocol.

jahia-oauth-okta module depends on jahia-authentication and jahia-oauth modules.

How to configure ?

Jahia User Group Provider

It is not recommended to save external user in the JCR. This module implements a custom user group provider.

The User Group Provider calls the Okta admin Rest API in order to search groups, users and members.

API results are cached in a specific EHCache for users and another for groups.

Configure the Okta user group provider under server administration:

• Okta provider name: the user group provider name
• Target site: the site where users and groups are mounted, globally if empty
• Organization: Okta organization (https://my.oktapreview.com) must not end with a slash character / and without the protocol (https is mandatory, hard-coded)
• API Token: the Okta API Token

Jahia Authentication

Activate those modules to your website and go to site settings.

• Client ID: Okta Client ID
• Client Secret: Okta Client Secret
• Scope: OpenID scopes
  • openid: to enable openid flow
  • email: to be able to get profile information (email in the sub property from the JSON token)
• Organization: the Ping Federate domain without ending with slash character /
• Callback URL: Jahia callback URL, the return url set up in Ping Federate
• Return URL: Jahia return URL afeter the callback (optional)