Creating an OpenID client with Okta

In this article, you will learn how to configure an OpenID client in Okta. You will find the complete documentation referred to in this guide here.

---

SUMMARY

• Step 1 : Create an application integration
• Step 2 : Configure basic settings
• Step 3 : Retrieve the OpenID Client Information

---

Step 1 : Create an application integration

• In the Okta administration interface, navigate to the Applications menu
• Then click on Create App Integration
• Choose for the parameters :
  • Sign-in method : OIDC - OpenID Connect
  • Application type : Web Application
• Click on Next

Step 2 : Configure basic settings

• In the General Settingssection, enter the following information to obtain the configuration shown in the following screenshot.
  • Grant type : check the options
    • Authorization Code
      
    • Refresh Token
      
    • Implicit (hybrid)
      
    • Allow ID Token with implicit grant type
  • Sign-in redirect URIs : https://leportail.xmco.fr/api/account/oicd/callback
  • Sign-out redirect URIs : https://leportail.xmco.fr/api/account/oicd/logged_out
  • Redirect to app to initiate login (OIDC Compliant)

If you want to use the Initiate login URI feature, we can provide you with the URI to fill in once the configuration is done in the Portal.

Step 3 : Retrieve the OpenID Client Information

• Once the OpenID client is created, retrieve the Client ID and Client secret from the General tab.
• Send this information to our staff.

Our staff will also need the (Server Metadata URL). This one is of the following form:

https://.okta.com/.well-known/openid-configuration