2017.52

Feature Enhancements

Token Preview

Configuring an application or integration to use OpenID Connect ID tokens or OAuth 2.0 access tokens can take a lot of trial-and-error. Okta has made it easier to choose configuration settings and see the resulting tokens in the Token Preview tab of the Authorization Server page:

Add values on the left side to see how they would affect the token on the right. All the fields are selection boxes except User. For User, type in the first few letters to see a choice of user names.

You can try out different combinations of values, and see the resulting tokens (or error messages). Once you've got the right combination, it's easy to configure your authorization server and other components.

New Values for amr Base Claim

We improved some behaviors related for base claim amr:

• When MFA factors sms or call are used, the amr claim returns mca.
• When MFA factor token:hardware is used, the amr claim returns hwk.
• When MFA factor web is used, the amr claim returns swk.

Bug Fix: Legacy Events Available in System Log

This bug fix is expected in preview orgs starting December 28, 2017 and expected in production orgs starting January 8, 2017.

The following legacy events, already present in the /api/v1/events endpoint, are also available in the /api/v1/logs endpoint (System Log API):

• app.auth.slo.with_reason
• app.auth.slo.saml.malformed_request.invalid_type
• app.keys.clone_legacy
• app.keys.generate_legacy
• app.keys.rotate_legacy