Keycloak and Okta Integration: Complete Developer Guide
Jump to navigation
Jump to search
Steps[edit]
Okta steps: Gemini Terraform code: Okta Keycloak integration[edit]
0) Create group in Okta for assign it to okta_app_oauth
1) OIDC Web App: okta_app_oauth: web, groups_claim (to restrict access)
2) Discovery Endpoint Location (Security > API)
https://<your-okta-domain>.okta.com/oauth2/default/.well-known/openid-configuration
Keycloak steps[edit]
3) Add provider and select OpenID Connect v1.0
Misc[edit]
- API Access Management license
- Federated authentication
- Configure automatic mapping of Okta groups to Keycloak roles through custom mappers
- Attribute Mapping
- Keycloak as an OIDC Client
- Mapping claims and assertions
- Keycloak Broker
- Interface IdentityProviderMapper
Related Terraform resources[edit]
keycloak_realmkeycloak_oidc_identity_provider:"okta"keycloak_openid_clientkeycloak_openid_client_default_scopeskeycloak_attribute_importer_identity_provider_mapperkeycloak_authentication_flowkeycloak_authentication_executionokta_app_oauthokta_auth_server_claimokta_app_group_assignment
Related[edit]
See also[edit]
identityProviders:syncMode- Okta pricing, Org Authorization Server, Okta Integrator Free Plan
- Okta app, Okta create app integration,
okta_app_oauth, Grant type - Okta Authorization, Okta Authorization servers:
Org,Custom, Okta default custom authorization server - Keycloak,
kc_admin, kc.sh [ export | import ], Keycloak logs, realm, roles, Mapping claims and assertions, Terraform Keycloak provider,helm install keycloak, JVM metrics, Keycloak Import, Interface IdentityProviderMapper,KC_HOSTNAME_STRICT_HTTPS, Variables, KC troubleshooting, versions,client_id, Keycloak TLS
Advertising:
