HueN.25725 (Customer) asked a question.
I am developing the Web Application which support SSO with Okta by OIDC protocol.
With my developer account, I can create the App Integration, setup the required information, and test the SSO successfully.
When deploying on the production for our customer, they use the paid okta account to create the App Integration and send me the required information: ClientId, Client Secret, Redirect Uri, Okta Domain, Post Logout Redirect Uri. We use the "default" value for Authorization Server. When testing SSO, we face the error: "The authorization server id is invalid". Access to the metadata endpoint: "https://<okta-domain>/oauth2/default/.well-known/openid-configuration", we have the error: "You do not have permission to access the feature you are requesting.". When accessing to the Security > Application, we don't see the Authorization Server tab.
So my questions:
- Does the OIDC protocol require the API Access Management feature to be enabled? If not, how can I enable OIDC protocol without using the API Access Management?
@HueN.25725 (Customer) the free endpoint can find from like: https://xxx.okta.com/.well-known/openid-configuration.
API Access Management is a paid module. some customers not buy it.