AngeloH.07167 (Customer) asked a question.
A customer asked us to integrate with Okta so they can import Okta users into our app's employee list for their team. Please help to assist how to create an Okta app so we can get the client ID and secret to provide the OAuth on our platform for the integration and then exchange Okta's access token to read Okta users' data.
For this type of question you would be better off posting to the Okta Developer Forum "https://devforum.okta.com/" especially if you need help on how to write your code to pull in users from Okta using an OIDC app. I'm guessing this will involve you implementing SCIM provisioning or levering Okta APIs.
If you want some basic documentation on how to set up an OIDC app, check out the follow links.
https://developer.okta.com/docs/concepts/oauth-openid/
https://support.okta.com/help/s/article/create-an-oidc-web-app-in-dashboard?language=en_US
If we need to create an OIDC app on Okta, where can we create an OIDC app that's public-facing?
To create a public-facing OIDC app you must do that on an Okta Customer Identity and Access Management (CIAM) tenant. Okta offers two types of CIAM tenants. One is built on their Okta Identity Engine platform and is called "Okta Customer Identity solution (CIS)". The other is build on their Auth0 platform and is called "Auth0 Customer Identity Cloud (CIC)".
Can you please share the link for Okta Customer Identity and Access Management (CIAM) tenant?
You or your customer will need to purchase a CIAM tenant if you don't already have one.
https://www.okta.com/contact-sales
For the CIAM tenant, can I create an OIN app on the develop account https://developer.okta.com/ instead? What do you mean by purchasing a CIAM tenant?
Also, to create a public OIDC app to read Okta users, should I create it under my developer account > applications or developer account > OIN app?
https://dev-42899361-admin.okta.com/admin/apps/active
https://dev-42899361-admin.okta.com/admin/apps/submission
If it is under /active, how can submit an /active app to /submission?
Reach out to Okta Sales as they would be the best ones to provide you information on how to get a CIAM tenant. https://www.okta.com/contact-sales
If your last question was regarding how to submit (publish) an app to the Okta Integration Network (OIN) here is a link to more information. https://developer.okta.com/docs/guides/submit-app-overview/
> Reach out to Okta Sales as they would be the best ones to provide you information on how to get a CIAM tenant. https://www.okta.com/contact-sales
I still don't get it. Why do I purchase a CIAM tenant in order to develop an OIN app? From the OIN documentation, I didn't see any requirement for CIAM either. Please share more information.
> If your last question was regarding how to submit (publish) an app to the Okta Integration Network (OIN) here is a link to more information. https://developer.okta.com/docs/guides/submit-app-overview/
My question is where to create the OIN app for development and then eventually submit it for public use. I saw there are 2 places to create an app but I don't know which one is correct.
You would not need a CIAM tenant to develop OIN template but anyone wanting to use your template to "create a public app" as you first described would.
You would use the "Build New OIN Integration" button found on the "Your OIN Integrations" screen as shown in the first screenshot you recently provided. Anyone wanting to use your template once approved and published will use the "Browse App Catalog" button found on the "Applications" screen as shown in the second screenshot you recently provided. The "Create App Integration" button you pointed to in the second screenshot is used to create generic apps not OIN templates.
We use cookies to provide the best website experience and to help understand marketing efforts. We may also share data with ad partners to reach potential customers across the web. To learn more, visit our Privacy Policy. Click here for Your Privacy Choices. You may also opt out of this sharing by signaling your preference via GPC, applicable only to the browser signaling the opt-out.
More information
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Select All
We use cookies to provide the best website experience and to help understand marketing efforts. We may also share data with ad partners to reach potential customers across the web. To learn more, visit our Privacy Policy. Click here for Your Privacy Choices. You may also opt out of this sharing by signaling your preference via GPC, applicable only to the browser signaling the opt-out.
More information
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Select All
You would not need a CIAM tenant to develop OIN template but anyone wanting to use your template to "create a public app" as you first described would.
You would use the "Build New OIN Integration" button found on the "Your OIN Integrations" screen as shown in the first screenshot you recently provided. Anyone wanting to use your template once approved and published will use the "Browse App Catalog" button found on the "Applications" screen as shown in the second screenshot you recently provided. The "Create App Integration" button you pointed to in the second screenshot is used to create generic apps not OIN templates.