https://github.com/netlify/example-gated-content-with-okta
This is an example of limiting access to a repository with okta
https://github.com/netlify/example-gated-content-with-okta
Last synced: 4 months ago
JSON representation
This is an example of limiting access to a repository with okta
- Host: GitHub
- URL: https://github.com/netlify/example-gated-content-with-okta
- Owner: netlify
- Created: 2018-02-21T08:18:32.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2023-11-01T08:18:17.000Z (over 1 year ago)
- Last Synced: 2025-02-24T17:49:55.493Z (4 months ago)
- Language: HTML
- Size: 9.54 MB
- Stars: 5
- Watchers: 5
- Forks: 4
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Okta + Netlify Authentication
This is an example of using Okta's Login Widget to provide access control for a Netlify site.
Try it out on your own account via this link:
[](https://app.netlify.com/start/deploy?repository=https://github.com/netlify/example-gated-content-with-okta)
You must make sure to deploy the site to an account with the JWT based visitor access control enabled.
## Setting Up
Make sure you have an Okta account and a URL for that account.
Then create a new Application inside Okta. Choose Single Page application.
Create a new API Token and keep it handy.
Then click the deploy button above. Once you've authenticated with GitHub, you will be asked to fill in the following variables:
* **OKTA_BASE_URL** this is the URL of your Okta account, ie: `https://dev-679417.oktapreview.com`
* **OKTA_API_TOKEN** this is the API token created above
* **OKTA_CLIENT_ID** the client id for the Okta application created above
* **JWT_SECRET** either the JWT_SECRET set globally for your Netlify team, or a long random token
Once the site has been created, go to site settings, and transfer the site to a team with JWT based visitor access control enabled. If you don't have a global JWT secret for the team, go to Access Control under settings and configure the JWT Secret to be the same as in the step above.
Then go to "Trusted Origins" under "API" in Okta and add a new Trusted Origin. Enter a title, the URL of your new site, and check both the CORS and Redirect boxes.