ARTIFACTORY: How to configure OAuth SSO with Okta

The purpose of this guide is to go over how to configure Oauth SSO with Okta.

Step 1: Configure OKTA OAuth Application

Create an Application in OKTA

• Login to OKTA

  • User should have admin permissions

  • When a user has admin permissions, the “ADMIN” button will be displayed next to their name, as illustrated below:

  • Click the “Admin” button to be redirected to the OKTA login page. You will need to sign in to access the OKTA admin dashboard.

• Add an Application

  • After logging in, navigate to the left panel and click on the “Applications” tab to add a new application.

  • To integrate a new app with OKTA, simply click the “Create App Integration” button.

• Select “Open ID Connect” and then choose “Web application” as the Application Type.

• Click on “Next” Button.

• Fill the Web App Integration Details

  • Fill “App Integration Name”

  • Fill “Sign in Redirect URLS”

    • Upon a successful login, OKTA will redirect the user to the "Sign in Redirect URL" along with the token code.

• Upon clicking the “Save” button, OKTA generates a “Client ID” and “Client Secret,” as illustrated below.

• To view your assignments, click on “Assignments,” then navigate to “People” and select your name from the list.

Step 2: Configure Artifactory to Use OKTA as OAuth Provider

Access OAuth SSO Settings in Artifactory

1. Log in to Artifactory as an Administrator :

   • Go to your Artifactory instance and log in with administrative rights.

2. Navigate to OAuth SSO Settings :

   • In the Admin module, go to Identity and Access > OAuth Single Sign-On

Add OKTA as an OAuth Provider

1. In artifactory go to Authentication -> Oauth SSO:

   • Click on Add OAuth Provider

2. Fill in the Provider Details :

   • Provider Name : <your provider name>

   • Provider Type: OpenID

   • Client ID : Your Client ID from OKTA.

   • Secret : Your Secret from OKTA.

   • Authorization URL : <OKTA_BASE_URL>/oauth2/v1/authorize

   • Token URL : <OKTA_BASE_URL>/oauth2/v1/token

   • User Info URL : <OKTA_BASE_URL>/oauth2/v1/userinfo

3. Save the Settings :

   • Once all the details are filled in, click on Save.

Note for PKCE:

Currently a Web application on Okta requires you to send the Secret even if PKCE is enabled. Therefore if you wish to enable PKCE you must create your Okta application as a single page application:

You can then follow the same steps as above and enable PKCE in artifactory: