<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00007MnH6CCAVOkta Identity EngineAccess GatewayAnswered2024-04-16T13:57:17.000Z2022-01-05T20:08:56.000Z2022-01-07T13:08:55.000Z

u7hwn (u7hwn) asked a question.

Getting Started with Securing API With Bearer Tokens

(I do not know if "Access Gateway" is the right Category for my question - I hope this reaches the proper audience!)

 

Summary: Our software has created an API which provides functionality to our Angular web pages. We would like to offer some of these API's to our vendors so they can create their own interfaces to our app. Which documents are relevant in helping me learn to use OKTA for my needs?

 

Details: I am looking to expose some of our API's to our vendors following the workflow other vendors use to expose their API's to us. Here is the workflow I want to support using OKTA:

 

  1. I supply the vendor/client with a "vendorID" and "Secret"
  2. The vendor POST's their vendorID and Secret to OKTA and receives back a Bearer Token
  3. Vendor POST's their requests to our API's using the authorizaton header "Bearer: <okta-bearer-token>"
  4. repeat step-3 until token expires
  5. vendor renews token with OKTA, then return to step-3

 

Which Tutorials and/or Documents will introduce me to setting up OKTA for this workflow? At this time, I am using the 30-Day trial server.


This question is closed.
Loading
Getting Started with Securing API With Bearer Tokens