Add and configure packages

Include the dependency

Configure the middleware

You need to configure the Okta SDK with some information about your Okta domain. You can provide this configuration through environment variables, configuration files, or in code. Then, put the middleware provided by the SDK into your application's pipeline.

Things you need

Okta Domain — Find it on the Developer Console dashboard in the upper-right corner as the Org URL.
Audience — The audience of your Authorization Server. The default value is api://default.

Note: https://${yourOktaDomain} is different from your admin URL. Don't include -admin in the value.

Open your Startup class and modify the ConfigureServices method to include the Okta middleware configuration. Replace the placeholders with your Okta configuration:

public void ConfigureServices(IServiceCollection services)
{
    services.AddAuthentication(options =>
    {
        options.DefaultAuthenticateScheme = OktaDefaults.ApiAuthenticationScheme;
        options.DefaultChallengeScheme = OktaDefaults.ApiAuthenticationScheme;
        options.DefaultSignInScheme = OktaDefaults.ApiAuthenticationScheme;
    })
    .AddOktaWebApi(new OktaWebApiOptions()
    {
        OktaDomain = Configuration["Okta:OktaDomain"],
    });

    services.AddAuthorization();
    
    services.AddControllers();
}

Modify the Configure method to have the app.UseAuthentication() and app.UseAuthorization() lines:

public void Configure(IApplicationBuilder app, IHostingEnvironment env)
{
    //...
    app.UseRouting();

    app.UseAuthentication();

    app.UseAuthorization();

    app.UseEndpoints(endpoints =>
    {
        endpoints.MapControllers();
    });
}

Update your using statements to import Okta.AspNetCore:

using Okta.AspNetCore;

The OktaWebApiOptions class configures the Okta middleware. You can see all of the available options in the Configuration Reference section in the Okta ASP.NET Core GitHub repo.

Next: Require authentication

Add and configure packages

On This Page

Include the dependency

Configure the middleware

Things you need