Community
Pricing

Okta.com
Sign in to Okta

Guides
Concepts
Reference
Languages & SDKs

Sign Up

Home
Guides
- Guides overview
- Basics
  - Quickstart: Signing in your first user
  - Create an API token
  - Enable CORS
  - Find your Okta domain
    - Overview
    - Find your Okta domain
  - Find your application credentials
    - Overview
    - Find your app integration credentials
  - Share Application Key Credentials for IdPs across Apps
  - Set up SAML Tracer
    - Overview
  - Upgrade SAML Apps to SHA256
  - Sign the Okta certificate with your own CA
  - Set up self-service registration
- Sign Users In
  - Add an external Identity Provider
  - Add multifactor authentication
  - Mobile App
    - Unlock a mobile app with biometrics
    - Build a custom sign-in UI in your mobile app
    - Sign users in to your mobile app
    - Share a sign-in session with native mobile apps
  - Sign users in to your single-page application
  - Sign users in to your web application
  - Sign users out
  - Configure Okta sign-on and App sign-on policies
- Authorization
  - Implement the Authorization Code flow
  - Implement the Authorization Code flow with PKCE
  - Create an Authorization Server
  - Implement the Client Credentials flow
  - Implement the Implicit flow
  - Request user consent
  - Implement the Resource Owner Password flow
  - Implement the SAML 2.0 Assertion flow
  - Tokens
    - Build a JWT for Client Authentication
    - Customize tokens returned from Okta with custom claims
    - Customize tokens returned from Okta with a Groups claim
    - Customize tokens returned from Okta with a dynamic allow list
    - Customize tokens returned from Okta with a static allow list
    - Refresh access tokens
    - Revoke Tokens
    - Work with Okta session cookies
      - Overview
    - Validate Access Tokens
      - Overview
    - Validate ID Tokens
      - Overview
- Brand and Customize
  - Customize the Okta-hosted error pages
  - Customize the Okta URL domain
  - Style the Widget
  - Customize SMS messages
  - Customize email notifications and email domains
- OIN Partner Integrations
  - Build a SCIM provisioning integration
  - OIDC and the OIN: A Developer Primer
  - Build a Single Sign-On (SSO) integration
  - Submit an app integration
- API Security
  - Implement OAuth for Okta
  - Implement OAuth for Okta with a Service App
  - Protect your API endpoints
  - Configure an access policy
- Deploy to Production
  - Deployment checklist
    - Pre-launch checklist
  - Deploy your app
    - Overview
    - Java
    - JavaScript
    - Mobile
  - Migrate to Okta
- Hooks
  - Common Hook Set-up Steps
  - Event Hook
  - Password Import Inline Hook
  - Registration Inline Hook
  - Token Inline Hook
Concepts
- Concepts overview
- API Access Management
- Authentication
- Authorization Servers
- Event Hooks
- Events API Migration
- External Identity Providers
- Feature Lifecycle Management
- Role Assignment
- How Okta works
- Identity engine
- Inline Hooks
- Key Rotation
- Monitor Okta
- Multi-tenant solutions
- OAuth 2.0 and OpenID Connect Overview
- Okta Data Model
- Okta Organizations
- Okta-Hosted Flows
- Hosted Vs. Embedded
- Policies
- Social Login Overview
- Understanding SAML
  - SAML Overview
  - SAML FAQ
- Understanding SCIM
  - SCIM Overview
  - SCIM FAQ
Reference
- Overview
- Core Okta API
  - Overview
  - Rate Limits
  - Error Codes
  - Sign in Your Users
  - Authentication
  - Identity Providers
  - OpenID Connect & OAuth 2.0 API
  - WebFinger
  - Manage Okta Objects
  - Administrator Roles
  - Apps
  - Authorization Servers
  - Dynamic Client Registration
  - Event Types
  - Factors
  - Features
  - Groups
  - Linked Objects
  - Mappings
  - MyAccount
  - Org
  - Policy
  - Schemas
  - Sessions
  - System Log
  - Templates
  - ThreatInsight
  - Trusted Origins
  - User Types
  - Users
  - Zones
- Advanced Server Access API
- SCIM Protocol
- Postman Collections
- Hooks
  - Event Hooks
  - Inline Hooks
  - Hooks best practices
  - Inline Hook Types
- Okta Expression Language
- Release Life Cycle
Languages & SDKs
- Languages & SDKs overview
- Mobile
  - Android
  - iOS
  - React Native
- Front End
- Back End
  - .Net
  - Go
  - Java
  - Node.js
  - PHP
  - Python
  - REST
Release Notes
- Overview
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016

Customize tokens returned from Okta with a dynamic allow list

Customize tokens returned from Okta with a dynamic allow list

On This Page