<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7V7aSAFOkta Classic EngineOkta Integration NetworkAnswered2018-09-05T01:29:08.000Z2017-03-29T18:31:38.000Z2017-04-13T17:00:56.000Z
DerrickC.87188 likes this.

  • paul.auer1.4793088256484656E12 (Okta, Inc.)

    Thank you for contacting Okta Support.

     

    The authorization to use resources is done via Access Token. The Access Token is used to provide information about a user, as what resources he has the right to access.

    Both ID Token and Access Token are JWT  (JSON Web Tokens) and they are decoded to obtain the user's information. ID Token and Access Token are obtained via REST endpoints.

     

    For more information about OpenID Connect, please refer to our documentation:

    https://help.okta.com/en/prev/Content/Topics/Apps/Apps_App_Integration_Wizard.htm#OIDCWizard

    http://developer.okta.com/docs/api/resources/oidc.html

     

    Thank you,

    Paul Auer

    Technical Support Engineer | Okta
    Expand Post

  • DerrickC.87188 (Customer)

    This was not a very helpful response:  "ID Token and Access Token are obtained via REST endpoints."

    Like Anton, I don't see any documentation for WHERE those endpoints are. What is the URL?

     

    The 2 pieces of documentation you linked MIGHT contain the answer, but it's hard to know without reading a LOT of extra (seemingly irrelevant) text.

    For example, the 2nd one eventually leads me to this: " /oauth2/:authorizationServerId/v1/authorize"

    What is :authorizationServerId? It seems to be unrelated to simply using OpenId Connect to log on using Okta.

     

    Could you elaborate on this response? Thank you.

    (Also, I clicked the thumbs-down and then realized I couldn't change it back to neutral or thumbs-up.)
    Expand Post

  • DerrickC.87188 (Customer)

    I've found the answer to my question, and perhaps the answer to Anton's question as well:

    The auth code endpoint is at https://<okta organization URL>/oauth2/v1/authorize

    and the token endpoint is at https://<okta organization URL>/oauth2/v1/token

    where <okta organization URL> is either like "dev-555555.oktapreview.com" or "mysubdomain.okta.com".
    Expand Post
This question is closed.
Loading
OpenID Connect URLs