Okta Authorization Servers for OpenID Connect and OAuth 2.0 Integrations
Channel: OktaDev
Date: 2023-01-12

This video explains the two types of OAuth 2.0 authorization servers Okta provides and gives you tips on how to create and debug them for your secure app integrations.

Table of Contents:

0:00 - Intro
0:54 - What are OpenId Connect and OAuth 2.0?
1:41 - What is an authorization server, and what are the types of authorization servers in Okta?
3:37 - Where to find and how to configure the different authorization servers?
6:13 - Public metadata or Discovery URLs for OIDC and OAuth 2.0 Integrations
7:23 - Troubleshooting common issues

---

OpenID Connect - https://www.okta.com/openid-connect/

OAuth 2.0 - https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth#oauth-actors

Authorization Code Flow - https://developer.okta.com/docs/guides/implement-grant-type/authcode/main/#grant-type-flow

Authorization Servers in Okta - https://developer.okta.com/docs/concepts/auth-servers/#which-authorization-server-should-you-use

Group Claims - https://support.okta.com/help/s/article/Can-we-retrieve-both-Active-Directory-and-Okta-groups-in-OpenID-Connect-claims?language=en_US

OpenID Metadata URI - https://developer.okta.com/docs/reference/api/oidc/#well-known-openid-configuration

OAuth 2.0 Metadata URI - https://developer.okta.com/docs/reference/api/oidc/#well-known-oauth-authorization-server

OIDC endpoints - https://developer.okta.com/docs/reference/api/oidc/#endpoints

OIDC Debugger Tool - https://oidcdebugger.com/

Okta Postman Collections - https://developer.okta.com/docs/reference/postman-collections/

Token Decoder - https://token.dev/

Signature Validation Failed - https://support.okta.com/help/s/article/Signature-Validation-Failed-on-Access-Token?language=en_US

Remote vs. Local validation - https://developer.okta.com/blog/2020/08/07/spring-boot-remote-vs-local-tokens and https://developer.okta.com/docs/reference/api/oidc/#introspect

-----
Okta is a developer API service that stores user accounts for your web apps, mobile apps, and APIs.

* Sign up for Okta for free at https://developer.okta.com/signup/
* For more info visit us at https://developer.okta.com/
* Developer Blog: https://developer.okta.com/blog/
* Follow us on Twitter: https://twitter.com/oktadev
* Follow us on FB: https://www.facebook.com/oktadevelopers/
* Follow us on LinkedIn: https://www.linkedin.com/company/oktadev