Okta hosts authentication and identity flows for your applications. This means that your application can let Okta handle signing users in, registering new users, and performing account recovery. The pages hosted by Okta can be customized, and you can bring your own domain.
You can build and self-host these flows in your application if you'd like, but using Okta-hosted flows has some advantages:
In order to use an Okta-hosted flow, your application must redirect to Okta. This is usually done with the OpenID Connect protocol.
At a high level, a sign-in flow has the following steps:
Depending on the type of application, different OpenID Connect grant types are recommended.