SMS has long played an important role as a universally applicable method of verifying a user's identity via one-time passcodes. And over the last decade, SMS and voice-based Multifactor Authentication has prevented untold attempts to compromise user accounts
Read moreIn this tutorial, you'll use JHipster to build a microservice stack and deploy it to Amazon Elastic Kubernetes Service (EKS). The microservices will use Java and Spring Boot for resource servers and Vue for the frontend. The server-side applications will use Spring's Reactive technology stack. The microservice will include multiple…
Read moreIn this tutorial, you'll learn how to deploy a JHipster-based reactive microservice to Azure Kubernetes Service (AKS). You'll use Azure's Cosmos DB as a persistent store for one of the services. For security, you'll use Okta as an OAuth 2.0 and OpenID Connect (OIDC) provider. You'll also securely encrypt all…
Read more
E. Dunham 4 min read
DevOps is one of those buzzwords. Ask three DevOps professionals what it means, and you might get four different answers. Most will agree that DevOps usually describes a mix of tools and techniques combining aspects of systems administration, software development, IT, release engineering, security, and often QA. At its best,…
Read moreKubernetes has become an unavoidable part of a software infrastructure these days. If you are an enterprise or medium/large company, chances are you are already running Kubernetes clusters for your workloads. If you are a DevOps engineer, there is a good chance you are maintaining either an on-prem Kubernetes cluster…
Read moreA Kubernetes (k8s) cluster comprises worker machines called nodes and a control plane consisting of the API server, scheduler, etcd, controller manager, and in the case of a PaaS (platform as a service), the cloud controller manager. The containers deployed to the cluster run in pods on the worker nodes.…
Read moreSince 2013 when it was released to the public, Docker has become an industry-standard tool for development teams to package applications into small executable containers. A year later, Kubernetes was released by Google to manage large amounts of containers, and provide features for high availability (HA) and auto-scaling.
Read moreHello Oktaverse!
Read more E. Dunham 2 min read
Hi, I'm edunham, and I'm an infra person. Our buzzwords include DevOps, Cloud Operations, and Site Reliability Engineering, though if you ask any two of us about the difference between those terms, you'll get at least three answers. Whatever name it's wearing, doing ops well requires not only the "how"…
Read moreIn this tutorial, we will leverage OpenID Connect (OIDC) to allow our DevOps team to securely access their EKS clusters on AWS. We use Role Based Access Control (RBAC)] to enforce the least privilege required without the need to configure AWS IAM roles. 😎
Read moreTip: This tutorial is part of our series on integrating Okta with popular infrastructure as a code solution. If you're not into Chef, check out our Ansible, Puppet, and Terraform tutorials.
Read moreTip: This tutorial is part of our series on how to integrate Okta with popular Infrastructure as a Code solution. If you're not into Ansible, check out our Puppet and Terraform tutorials.
Read moreIf you use Puppet to automate configuration management across dynamic server fleets, there's a question about identity & access management – how do you get accounts and credentials on the machines?
Read moreGoogle's recent approach to SameSite cookie attributes caused a bit of confusion among developers. Especially in cases where handling redirects is necessary. After doing some research in the topic I'd like this article to be a guide on how to handle SameSite cookie attributes properly in production. This guide can…
Read moreAs a big fan of open source, I'm loving the fact that .NET Core is cross-platform. It opens up endless possibilities, from hobby projects, experiments, and proofs of concept, to massive high-load production applications that run on cost-effective infrastructure with high security and scalability. I usually get the simplest and…
Read moreWhen I began programming (in the '80s), computers weren't equipped with a network card by default. The internet was almost unknown and modems were slow and noisy. The software was installed from stacks of flexible floppy disks.
Read moreBack in the days of DOS, software developers couldn't count much on fancy tools. There were no graphical interfaces, and everything was purely text-based. I remember using brief as an editor for my C source files (C++ didn't exist yet), and compiling the code from the command line with the…
Read moreOver the past few months, I have been working on a side project that I am really excited about. If you know me well, you probably know I enjoy using my side projects to help other teams meet their goals (and if you don't, I am a Senior Security H@X0R…
Read morePhoto by Lucas Sankey on Unsplash
Read more
Ivan Dwyer 5 min read
Many Okta customers who leverage Advanced Server Access to secure and automate identity across their dynamic infrastructure fleets use HashiCorp Terraform to declare and provision resources across AWS, GCP, and Azure. One customer built their own Terraform Provider as a wrapper to the Advanced Server Access API, which we recently…
Read more
Nico Triballier 15 min read
In this tutorial, we'll configure Okta Advanced Server Access (aka 'ASA') so our DevOps team can securely access Virtual Machines (aka 'VMs') on Google Cloud Platform (aka 'GCP'). We'll also configure a service account so our Jenkins instance can connect to other VMs to run remote commands.
Read moreContext, as they say, is king.
Read moreHave you ever spent hours trying to figure out why your newly-installed database, web server, or Python library won't work? If this sounds familiar, you likely understand the joy of software containers. Forget all those fruitless Stack Exchange searches trying to solve your configuration and dependency problems. Just install a…
Read moreGitHub recently announced a new feature, GitHub Package Registry, currently in beta. It's designed to allow GitHub users to publish and distribute packages of their software directly on GitHub instead of relying on an external system.
Read moreNot too long ago, deployments were done by hand - manually pushed to a physical server somewhere in a building your company owned. The software engineering world has come a long way since then, and we have more options than ever get our code and data live, automatically. Here are…
Read moreCommand line applications (CLI) are often the core tools for automating tasks, such as deploying production applications, running tests, building reports, migrating data, DevOps, and the list goes on and on. If you find yourself doing the same things over and over again, chances are you can automate those steps…
Read moreGetting started with CloudFormation can be intimidating, but once you get the hang of it, automating tasks is easy. While CloudFormation might seem like overkill for something as simple as deploying a static site (for example you could just copy HTML files to a S3 bucket using the Amazon Console…
Read moreGood developers care as much about efficiency as they do about writing clean code. Containerization can add efficiency to both your workflow and your application, and has thus become all the rage among modern dev. And, as a good developer, you know that manually creating containers from images using docker…
Read moreCreating a consistent environment for development, testing, staging, and production is one of the big benefits of using containers. Not only do containers make the entire environment portable, they remove environment-specific problems, like, "Why does it work in test, but not in production?" Usually, it's a package or framework that's…
Read moreIt works on my machine. We've all heard it. Most of us have said it. It's been impossible to get around it... until now. Not only can adding Docker to your development environment solve that issue, but it can make it drop-dead simple to onboard new developers, keep a team…
Read more
Maurice 
Andrew Hughes 
Deepu K Sasidharan 
Victory Nwani 
Frederico Hakamine 
Gergely Sinka 
Franco Tiveron 
Micah Silverman 
Vickie 
Heather Downing 
Vishal Rohilla 
David Neal 
Patrick McDowell 
Lee Brandt