OIDC User Auth

valeriu.hudea1.5051426125598904E12 (Okta, Inc.)

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:28 AM

You can add users from your Admin Dashboard -> Directory -> People

by choosing to +Add Person or from More Actions -> Import Users from CSV

(file). https://www.okta.com/resources/how-to-adding-users/ There is another method trough API calls (we use Postman: https://developer.okta.com/docs/api/getting_started/api_test_client.html?_ga=1.266784654.1660618437.1505996735 (https://developer.okta.com/docs/api/getting_started/api_test_client.html?_ga=1.266784654.1660618437.1505996735 ))

https://developer.okta.com/docs/api/resources/users.html#create-user

and you can assign the to the App:

http://developer.okta.com/docs/api/resources/apps.html#application-user-operations(http://developer.okta.com/docs/api/resources/apps.html#application-user-operations)

They don't have to have admin privileges to get access to the App User Home. The admin(you) can choose the user privleges or give admin rights.

This is a list of admin rights https://support.okta.com/help/Documentation/Knowledge_Article/Administrators-793645444

Single-sign-on is about logging on in one place and having that authenticate you at other locations automatically (Okta). OpenID is about delegating authentication to an OpenID provider so you can effectively log on to multiple sites with the one set of credentials.

You could use OpenID as your authentication scheme for SSO but that's incidental.

If you have cookies enabled in your browser, and you have "allowed" the OpenID provider to automatically authenticate you. Then it would appear that you would "automatically" be logged in ... because the cookie would be picked up by the provider and you'd be redirected back.

https://developer.okta.com/blog/2017/06/29/oidc-user-auth-aspnet-core#add-authentication

Best Regard

Expand Post

valeriu.hudea1.5051426125598904E12 (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:28 AM
You can add users from your Admin Dashboard -> Directory -> People
by choosing to +Add Person or from More Actions -> Import Users from CSV
(file). https://www.okta.com/resources/how-to-adding-users/ There is another method trough API calls (we use Postman: https://developer.okta.com/docs/api/getting_started/api_test_client.html?_ga=1.266784654.1660618437.1505996735 (https://developer.okta.com/docs/api/getting_started/api_test_client.html?_ga=1.266784654.1660618437.1505996735 ))
https://developer.okta.com/docs/api/resources/users.html#create-user
and you can assign the to the App:
http://developer.okta.com/docs/api/resources/apps.html#application-user-operations(http://developer.okta.com/docs/api/resources/apps.html#application-user-operations)

They don't have to have admin privileges to get access to the App User Home. The admin(you) can choose the user privleges or give admin rights.
This is a list of admin rights https://support.okta.com/help/Documentation/Knowledge_Article/Administrators-793645444

Single-sign-on is about logging on in one place and having that authenticate you at other locations automatically (Okta). OpenID is about delegating authentication to an OpenID provider so you can effectively log on to multiple sites with the one set of credentials.
You could use OpenID as your authentication scheme for SSO but that's incidental.
If you have cookies enabled in your browser, and you have "allowed" the OpenID provider to automatically authenticate you. Then it would appear that you would "automatically" be logged in ... because the cookie would be picked up by the provider and you'd be redirected back.
https://developer.okta.com/blog/2017/06/29/oidc-user-auth-aspnet-core#add-authentication

Best Regard
Expand Post
KaranjeetS.82881 (Customer)
9 years ago
If I add a person manually say abc@gmail.com and assign it to my app. When I run my application how does okta know that request is coming from abc@gmail.com. If I clear out cookies, I am prompted by okta user name and password field. What credentials does abc@gmail.com need to put in here?
Expand Post

Your Privacy

Your Privacy

Strictly Necessary Cookies

Strictly Necessary Cookies

Functional Cookies

Functional Cookies

Performance Cookies

Performance Cookies

Share or Sell of Personal Data

Share or Sell of Personal Data

Advertising Cookies

Your Privacy

Your Privacy

Strictly Necessary Cookies

Strictly Necessary Cookies

Functional Cookies

Functional Cookies

Performance Cookies

Performance Cookies

Share or Sell of Personal Data

Share or Sell of Personal Data

Advertising Cookies