Skip to content

Commit eabbe64

Browse files
authored
Merge branch 'main' into edunham-patch-1
2 parents b7b57e1 + e952d55 commit eabbe64

6 files changed

+102
-7
lines changed
Loading
Loading

_source/_posts/2023-07-28-terraform-workshop.md

-6
Original file line numberDiff line numberDiff line change
@@ -119,12 +119,6 @@ Below the client ID, the "client authentication" radio button defaults to "Clien
119119

120120
In the browser, save your changes to the general settings of the API Service App, and navigate to the app's Okta API Scopes. Grant `okta.groups.manage`, `okta.policies.manage`, and `okta.users.manage` for this workshop.
121121

122-
In the terminal, `cd okta-terraform-workshop` and convert the PKCS-1 key to an RSA (PKCS-8) key:
123-
124-
```
125-
$ openssl rsa -in pkcs.pem -out rsa.pem
126-
```
127-
128122
### 3.4: Configure the Okta Terraform provider
129123

130124
After setting up the app integration, you have found all the values required by the provider configuration! In `main.tf`, check that your provider block contains the `org_name`, `client_id`, and `private_key` file location. Tell it where to find the private key that you converted. With all the values filled out, the provider configuration looks like this:

_source/_posts/2024-04-30-express-universal-logout.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -732,7 +732,7 @@ export const Todos = () => {
732732
This web application architecture uses cookie-based sessions instead of session tokens to authenticate to the backend resources. However, in the case of mobile apps and single-page applications, you'll need to revoke refresh tokens on the front end. As per the [spec](https://datatracker.ietf.org/doc/html/draft-parecki-oauth-global-token-revocation#name-revocation-expectations), written by [Aaron Parecki](https://aaronparecki.com/) a successful sign-out will require revoking a user's refresh token.
733733
734734
## Initiate Universal Logout through Okta
735-
This tutorial provides the fundamental steps to creating a UL endpoint to end a user's session or tokens. However, the UL feature isn't available yet; once released, a secondary blog will be posted with further instructions on how to initiate sign-out with Okta. Stay tuned! For now, you can find the completed project [ul-workshop-complete](https://github.com/oktadev/okta-enterprise-ready-workshops/tree/ul-workshop-complete) on our Oktadev GitHub repository.
735+
This tutorial provides the fundamental steps to creating a UL endpoint to end a user's session or tokens. UL is currently available [Early Access in Okta Preview orgs](https://help.okta.com/oie/en-us/content/topics/itp/universal-logout.htm). Once generally available a secondary blog will be posted with complete instructions on how to initiate sign-out end-to-end with Okta. Stay tuned! For now, you can find the completed project [ul-workshop-complete](https://github.com/oktadev/okta-enterprise-ready-workshops/tree/ul-workshop-complete) on our Oktadev GitHub repository.
736736
737737
## Continue adding more features to your SaaS app!
738738
Now that you have an OIDC app with a UL endpoint, you can continue your Enterprise-Ready journey by adding user lifecycle management through System for Cross-domain Identity Management [(SCIM)](https://datatracker.ietf.org/doc/html/rfc7644).
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
---
2+
layout: blog_post
3+
title: "Introduction to the Okta Integration Network"
4+
author: edunham
5+
by: advocate
6+
communities: [devops,security,mobile,.net,java,javascript,go,php,python,ruby]
7+
description: "Videos to help you understand the OIN as a decision maker or integration builder"
8+
tags: []
9+
tweets:
10+
- ""
11+
- ""
12+
- ""
13+
image: blog/introduction-to-okta-integration-network/building-integrations.jpg
14+
type: awareness
15+
---
16+
17+
Whether or not you use Okta's products, you may find yourself working on software whose target audience includes Okta customers. Adding your application to the Okta Integration Network creates a smoother and less error-prone user management experience for these shared customers, and can unlock the potential of additional features as well.
18+
19+
For a high-level perspective on the benefits of building to the open standards supported by the OIN, which also lets you easily support any other identity provider's integration marketplace, here's Director of Identity Standards Aaron Parecki:
20+
21+
{% youtube YIvslsPaknI %}
22+
23+
And to learn about what the integration submission process looks like on a more technical level, the OIN 101 Walkthrough can help:
24+
25+
{% youtube aHvSrXoOWDw %}
26+
27+
Check out Okta's [Saas Security page](https://www.okta.com/saas-security/) and [integrator help hub](https://support.okta.com/help/s/product-hub/application-integrations?language=en_US) for more resources.
28+
29+
Follow OktaDev on [Twitter](https://twitter.com/oktadev) and subscribe to our [YouTube channel](https://www.youtube.com/c/OktaDev/) to learn about additional integrator resources as soon as they're available. We also want to hear from you about topics you want to see and questions you may have. Leave us a comment below!
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
---
2+
layout: blog_post
3+
title: "How to Submit Your System for Cross-domain Identity Management (SCIM) Integration to the Okta Integration Network"
4+
author: semona-igama
5+
by: advocate
6+
communities: [devops,security,mobile,.net,java,javascript,go,php,python,ruby]
7+
description: "A guide to submitting your user management integration with SCIM to the Okta Integration Network as an added secure feature to offer your enterprise customers."
8+
tags: [enterprise-ready-workshops, scim, okta-integration-network]
9+
tweets:
10+
- ""
11+
- ""
12+
- ""
13+
image: blog/scim-okta-integration-network/scim-okta-integration-network.jpg
14+
type: awareness
15+
---
16+
17+
You have an app with SSO capabilities. What else can you do with Okta to transform it into an enterprise-ready powerhouse?
18+
19+
Today's enterprises face critical identity management challenges that directly impact their operations; this includes:
20+
21+
- Rapid business growth outpacing their current user management capabilities
22+
- Scattered user accounts creating administrative chaos
23+
- User management that doesn't scale with company growth (access free-for-all to resources)
24+
- Bottlenecks in user provisioning slowing down productivity (i.e., manual provisioning)
25+
26+
and more critically,
27+
28+
- Security vulnerabilities from inconsistent user deprovisioning
29+
30+
This is where you come in as a partner. By integrating with Okta through SCIM (System for Cross-domain Identity Management), a standard for managing users, you can offer enterprise customers a solution that addresses these pain points.
31+
32+
## Why System for Cross-domain Identity Management (SCIM) is your gateway to enterprise success
33+
34+
It facilitates:
35+
- Real-time user synchronization, which keeps customer organizations agile with instant updates as employees join, leave, or move within the company
36+
- Automated lifecycle management, which eliminates manual processes with streamlined provisioning, updates, and de-provisioning
37+
- Enhanced security controls, which give enterprises precise control over user access and permissions
38+
- Standards-based integration, which leverages open Internet Engineering Task Force (IETF) protocols for reliable, interoperable, and consistent implementation
39+
- Reduced operational complexity, which helps customers save on their identity management costs and overhead
40+
41+
## Accelerate your growth by joining the Okta Integration Network (OIN)
42+
And once you have a SCIM-compliant integration with Okta, we invite you to [Okta's Integration Network (OIN)](https://www.okta.com/integrations/). Here, you can unlock potential growth by tapping into Okta's massive customer base of 18,000+ organizations, including leading companies and government institutions that rely on Okta as their identity security foundation. Furthermore, fast-track enterprise deals with your pre-built integration and reduces sales friction with verified enterprise-ready status. More importantly, you'll be able to differentiate your offering with premium security features.
43+
44+
## How to submit your SCIM integration to the Okta Integration Network (OIN)
45+
Here is a video walkthrough on creating your SCIM provisioning instance for OIN testing and submission.
46+
47+
{% youtube xbX0Kxi9wik %}
48+
49+
**Prerequisites**
50+
- [Okta Developer Account](https://developer.okta.com/signup/)
51+
- Runscope test links (2): [CRUD](https://developer.okta.com/docs/guides/submit-oin-app/scim/main/#runscope-crud-tests) and [SPEC](https://developer.okta.com/docs/guides/scim-provisioning-integration-prepare/main/#test-your-scim-api) tests
52+
- [Manual Okta SCIM integration tests](https://developer.okta.com/docs/guides/submit-oin-app/scim/main/#manual-okta-scim-integration-tests)
53+
- Provisioning-enabled instance and confirmation
54+
55+
Lastly, you must have a publicly accessible SCIM server for Okta to send requests to. I used the SCIM server from this [Enterprise Workshop on SCIM](/blog/2023/07/28/scim-workshop) to demo the submission process.
56+
57+
## Learn more about Secure Identity Integrations
58+
For more resources, check out Okta's [Saas Security page](https://www.okta.com/saas-security/) and [integrator help hub](https://support.okta.com/help/s/product-hub/application-integrations?language=en_US).
59+
60+
## Enterprise workshop series on building a SCIM server and other integrations
61+
62+
|Posts in the on-demand workshop series|
63+
| --- |
64+
| 1. [How to Get Going with the On-Demand SaaS Apps Workshops](/blog/2023/07/27/enterprise-ready-getting-started) |
65+
| 2. [Enterprise-Ready Workshop: Authenticate with OpenID Connect](/blog/2023/07/28/oidc_workshop) |
66+
| 3. [Enterprise-Ready Workshop: Manage Users with SCIM](/blog/2023/07/28/scim-workshop) |
67+
| 4. [Enterprise Maturity Workshop: Terraform](/blog/2023/07/28/terraform-workshop) |
68+
| 5. [Enterprise Maturity Workshop: Automate with no-code Okta Workflows](/blog/2023/09/15/workflows-workshop) |
69+
| 6. [Enterprise-Ready Workshop: How to Instantly Sign a User Out Across All Your Apps](/blog/2024/04/30/express-universal-logout) |
70+
71+
## Stay in touch!
72+
Follow OktaDev on [X](https://twitter.com/oktadev) and subscribe to our [YouTube channel](https://www.youtube.com/c/OktaDev/) to learn about additional integrator resources as soon as they're available. We also want to hear from you about topics you want to see and questions you may have. Leave us a comment below!

0 commit comments

Comments
 (0)