Skip to content

Commit bd2dccf

Browse files
author
Frederic Mercier
committed
DBACLD-183631: improve the OpenID troubleshooting
1 parent a067b43 commit bd2dccf

File tree

2 files changed

+297
-136
lines changed

2 files changed

+297
-136
lines changed

authentication/Okta/README.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -264,13 +264,13 @@ In this step, we augment the token with meta-information that is required by the
264264
265265
#### 1. Retrieve Okta Server information.
266266
267-
From the Okta console, in **Security** / **API** / **default** / **Settings** :
268-
- Note the *OKTA_SERVER_NAME* which is the **Okta domain** in the **Issuer** (similar to *\<shortname\>.okta.com*).
267+
- From the Okta console, in **Security** / **API** / **default** / **Settings** :
268+
- Note the *OKTA_SERVER_NAME* which is the **Okta domain** in the **Issuer** (similar to *\<shortname\>.okta.com*).
269269
270270
#### 2. Create a secret with the Okta Server certificate.
271271
272-
To allow ODM services to access the Okta Server, it is mandatory to provide the Okta Server certificate.
273-
You can create the secret as follows:
272+
- To allow ODM services to access the Okta Server, it is mandatory to provide the Okta Server certificate.
273+
You can create the secret as follows:
274274
275275
```
276276
keytool -printcert -sslserver <OKTA_SERVER_NAME> -rfc > okta.crt
@@ -279,10 +279,9 @@ In this step, we augment the token with meta-information that is required by the
279279
280280
#### 3. Generate the ODM configuration file for Okta.
281281
282-
The [script](generateTemplate.sh) allows you to generate the necessary configuration files.
283-
You can download the [okta-odm-script.zip](okta-odm-script.zip) .zip file to your machine. This .zip file contains the [script](generateTemplate.sh) and the content of the [templates](templates) directory.
282+
- Download the [okta-odm-script.zip](okta-odm-script.zip) .zip file to your machine
283+
- and run the script [`generateTemplate.sh`](generateTemplate.sh) to generate the ODM configuration files (using [templates](templates)) :
284284
285-
Generate the files with the following command:
286285
```
287286
./generateTemplate.sh -i <OKTA_CLIENT_ID> -x <OKTA_CLIENT_SECRET> -n <OKTA_SERVER_NAME> -g <OKTA_ODM_GROUP> -s <OKTA_API_SCOPE>
288287
```
@@ -294,10 +293,11 @@ In this step, we augment the token with meta-information that is required by the
294293
- *OKTA_API_SCOPE* has been defined [above](#configure-the-default-authorization-server) (*odmapiusers*)
295294
296295
297-
The files are generated into the `output` directory.
296+
The files are generated into a directory named `output`.
298297
299298
#### 4. Create the Okta authentication secret.
300299
300+
- run the command below to create a secret containing the configuration files generated at the previous step:
301301
```
302302
kubectl create secret generic okta-auth-secret \
303303
--from-file=OdmOidcProviders.json=./output/OdmOidcProviders.json \

0 commit comments

Comments
 (0)