<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>OpenID Connect (OIDC) on Nirmata Documentation</title><link>https://docs.nirmata.io/docs/control-hub/identity-access/oidc/</link><description>Recent content in OpenID Connect (OIDC) on Nirmata Documentation</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 21 Mar 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://docs.nirmata.io/docs/control-hub/identity-access/oidc/index.xml" rel="self" type="application/rss+xml"/><item><title>Configuring Okta as an Identity Provider in Nirmata</title><link>https://docs.nirmata.io/docs/control-hub/identity-access/oidc/okta/</link><pubDate>Thu, 21 Mar 2024 00:00:00 +0000</pubDate><guid>https://docs.nirmata.io/docs/control-hub/identity-access/oidc/okta/</guid><description>&lt;h2 id="prerequisites">Prerequisites&lt;/h2>
&lt;ul>
&lt;li>Administrative access to your Okta organization account or Okta App Integration&lt;/li>
&lt;li>Administrative access to Nirmata account&lt;/li>
&lt;/ul>
&lt;h2 id="configuration-steps">Configuration Steps&lt;/h2>
&lt;h3 id="1-create-a-new-application-in-okta">1. Create a New Application in Okta&lt;/h3>
&lt;ol>
&lt;li>Log in to your Okta Admin Console.&lt;/li>
&lt;li>In the left sidebar, navigate to &lt;strong>Applications &amp;gt; Applications&lt;/strong>.&lt;/li>
&lt;li>Click &lt;strong>Create Application Integration&lt;/strong>.&lt;/li>
&lt;li>Select &lt;strong>OIDC&lt;/strong>.&lt;/li>
&lt;li>Choose &lt;strong>Web Application&lt;/strong> as the platform.&lt;/li>
&lt;li>Click &lt;strong>Create&lt;/strong>.&lt;/li>
&lt;/ol>
&lt;h3 id="2-configure-application-settings">2. Configure Application Settings&lt;/h3>
&lt;ol>
&lt;li>In the application settings, fill in the following:
&lt;ul>
&lt;li>&lt;strong>App integration name&lt;/strong>: (e.g., Nirmata app)&lt;/li>
&lt;li>&lt;strong>Application type&lt;/strong>: Web&lt;/li>
&lt;li>&lt;strong>Grant type configuration:&lt;/strong>
&lt;ul>
&lt;li>Under &lt;strong>Grant type&lt;/strong>:
&lt;ul>
&lt;li>Check &lt;strong>Client Credentials&lt;/strong> (under &amp;ldquo;Client acting on behalf of itself&amp;rdquo;).&lt;/li>
&lt;li>Under &lt;strong>Core grants&lt;/strong>, check &lt;strong>Authorization Code&lt;/strong>. (Leave &lt;strong>Refresh Token&lt;/strong> unchecked unless your use case requires it.)&lt;/li>
&lt;li>Expand &lt;strong>Advanced&lt;/strong>:
&lt;ul>
&lt;li>Leave all &lt;strong>Okta direct auth API grants&lt;/strong> (OTP, OOB, MFA OTP, MFA OOB) unchecked.&lt;/li>
&lt;li>Under &lt;strong>Other grants&lt;/strong>, check &lt;strong>Implicit (hybrid)&lt;/strong>.
&lt;ul>
&lt;li>Check both &lt;strong>Allow ID Token with implicit grant type&lt;/strong> and &lt;strong>Allow Access Token with implicit grant type&lt;/strong>.&lt;/li>
&lt;/ul>
&lt;/li>
&lt;/ul>
&lt;/li>
&lt;/ul>
&lt;/li>
&lt;/ul>
&lt;/li>
&lt;li>&lt;strong>Login redirect URIs&lt;/strong>:
&lt;ul>
&lt;li>&lt;strong>Sign-in redirect URIs&lt;/strong> &lt;code>https://&amp;lt;nirmata-domain&amp;gt;/security/api/oidc/callback/&lt;/code>&lt;/li>
&lt;/ul>
&lt;/li>
&lt;li>&lt;strong>Sign-out redirect URIs&lt;/strong> &lt;code>https://&amp;lt;nirmata-domain&amp;gt;/security/api/oidc/logout/&lt;/code>&lt;/li>
&lt;/ul>
&lt;/li>
&lt;/ol>
&lt;p>Click on &lt;strong>Save&lt;/strong>&lt;/p></description></item></channel></rss>