Step-Up Authentication Examples With Okta
Step-up Authentication with Okta Workforce Identity Cloud Step-up authentication in an application is a pattern of allowing access to non-critical resources using basic level of authentication, and requiring additional authentications for critical resources. This has the effect of providing a balance between frictionless user experience and security in an application. There are several methodologies to provide the functionality as discussed here. In this article we will explore few ways Okta Workforce Identity Cloud (WIC) can...
Why You Should Migrate to OAuth 2.0 From Static API Tokens
Static API tokens have long been used to call external APIs and access the resources of third parties such as software vendors. As API standards have evolved, OAuth 2.0 emerged as the option offering more robust security, greater flexibility, and a better developer experience. Let’s explore the advantages of moving away from static tokens in favor of OAuth 2.0. Table of Contents Static API token landscape Shift from static API tokens to OAuth 2.0 for...
Enterprise Ready Workshop: Automate with no-code Okta Workflows
This tutorial is part of the on-demand workshop series. In this workshop, you’ll enhance the base Todo application by creating an automated report using Okta’s no-code Workflows platform. Table of Contents What is Okta Workflows? Getting access to Okta Workflows Creating a flow Okta Workflows building blocks Setting up the Todo application Enhancing the Todo application with a new API Launching the API in a local tunnel Building the Todo Report flow Updating the flow...
We're Living in a Passwordless World
Passwords? Bah! Who wants to remember all those letter, number, and special character combinations? Password managers and password manager browser extensions can help us, but what if we stopped using passwords entirely? What if we stopped using authentication factors, such as SMS one-time passwords (OTP), that pose risks where malicious actors can access sensitive authentication information (phishing)? What if authentication was so seamless that we could use built-in device hardware capabilities instead? Seamless, easy-to-use authentication...
July Podcast: Developing Okta's SDKs with Laura Rodriguez and Alisa Duncan
Having libraries that interact with services helps make your coding life easier when developing solutions. You may evaluate and estimate the complexity of your software development projects based on the Software Development Kit (SDK) ease of use. So what makes a great SDK? Building SDKs to delight developers Staff SDK Engineer Laura Rodriguez and Developer Advocate Alisa Duncan join us this month to discuss the SDKs that make Okta’s APIs idiomatically accessible from various languges...
Enterprise Maturity Workshop: Terraform
This workshop is part of our Enterprise-Ready Workshop series. Follow along to get familiar with managing identity as code using Okta’s Terraform provider, so you can assist enterprise customers and simplify any identity setup steps that your product might require. In this workshop, you’ll use Terraform to manage users and groups in an Okta Organization, while practicing beginner and intermediate Terraform skills. Posts in the on-demand workshop series 1. How to Get Going with the...
Enterprise-Ready Workshop: Manage users with SCIM
Hello SaaS developers! You sell your software to technologically mature enterprises, and they expect it to interface seamlessly with all their other tools. In our Enterprise-Ready Workshop on OpenID Connect, you learned how to solve part of this problem, by creating user accounts in your application for your customers’ employees whenever they log in. Posts in the on-demand workshop series 1. How to Get Going with the On-Demand SaaS Apps Workshops 2. Enterprise-Ready Workshop: Authenticate...
Enterprise-Ready Workshop: Authenticate with OpenID Connect
This workshop is part of our Enterprise Readiness Workshop series. In this workshop, you will be wearing the hat of a SaaS developer who will up-level his/her app to allow users (from your big enterprise customers) to log on using their own company credentials without providing a password directly to your app. When any enterprise customer considers buying your software to enhance their employees’ productivity, their IT and security teams want to make sure employees...
How to Get Going with the On-Demand SaaS Apps Workshops
Having an enterprise-ready SaaS application means your application supports authentication best practices, can scale across multiple customers and users, has automated means to re-create environments, and can securely add enhancements and value-adds your customers expect. Join this free virtual workshop series where we take your SaaS application on a journey of enterprise-ready identity — you’ll wear the hat of a SaaS developer preparing your Todo application to support enterprise-level customers who want to use your...
June Podcast: Approaching Automation with Jeff Taylor
Approaching automation in identity Product Manager Jeff Taylor joins us for the first time to discuss the principles behind successful automation. What’s the automation journey, and how does it relate to organizational maturity? How can you scale your work with automation while avoiding the pitfalls of premature optimization? If you’re ready to start automating Okta administration tasks, where should you start? Find the OktaDev Workforce podcast on approaching identity automation Listen to the audio version...