Understand Methods for Creating an Okta Session

Contrast the different ways to set a session in Okta

Retrieve a Session Cookie using OIDC Connect Az Endpoint

Manage an Okta Session via the Okta Sessions API

• Session Token
• Get Current Session
• Clear User Sessions
• Suspend User
• Retrieving a session cookie by visiting an application embed link

SSO and API Access Management with OIDC and OAuth

Enable an OAuth Client Application to Securely Access Services

Use the authorization code flow to obtain tokens

Validate tokens

Use a refresh token to obtain a new access token

Use the /revoke endpoint to revoke a token

Identify trusted and untrusted clients and the proper flows to use with each

• Get a Refresh Token
• What is an authorization server
• OpenID Connect & OAuth 2.0 API - Tokens and claims
• OpenID Connect & OAuth 2.0 API
• Endpoints

Describe client types and flows

Explain why is authorization code flow more secure than implicit flow

Define which flow to use when a software or service needs to access an API using access token

Explain how OIDC achieves SSO

Explain which flow is appropriate for app types

Explain the difference between introspect call and signature validation

List all possible actors in an OIDC flow

• Validate Access Tokens Overview
• OpenID Connect & OAuth 2.0 API - Introspect Endpoint
• Authorization Code Flow with PKCE
• OpenID Connect and OAuth 2.0 API
• Recommended Flow by Application Type

Optimize the API consumption

Optimize the API consumption (performance)

Optimize the API consumption (security)

• Check you Rate Limits with Okta’s rate Limit Headers
• Rate Limits
• Okta API Endpoints and Per-Minute Limits
• Validate Access Tokens Overview

Use the Core API to Manage Users

Demonstrate understanding of the Users API and which operations can be performed

Manage Users via the Users API

• Users API - Request Parameters
• Users API - Create User in Group
• Users API - Reset Authenticator

User Objects, User States, and User Profile Sourcing

Demonstrate understanding of User Objects, User States, and User Profile Sourcing Options

• User Properties
• Provider Object
• User Status
• Understanding User Status Values

Use the Core API - Groups

Manage Groups using the Groups API

Manage Group membership using the Groups API

• Add Group
• Profile Object
• Group Operations
• Create Group Rule

Just-in-Time Provisioning (JIT)

Demonstrate understanding of how JIT works as well as when to use JIT

• Provisioning Concepts
• Account Linking and Just-in-Time Provisioning
• Identity Providers

Use the Core API - Schemas

Demonstrate understanding of the Okta User Schema

Demonstrate understanding of Okta Application Schemas

• User Schema Property Types and Validation
• Schema API

Use the Core API - Policy

Demonstrate understanding of Okta Policies and Rules and how these affect operations

• Authorization Servers - Policy Operations
• Okta Sign On Policy
• Password Policy

Use the Core API - Authenticators

Demonstrate understanding of multi-factor authentication in Okta

Demonstrate understanding of the Authenticators Administration API and which operations can be performed

• Authenticators Administration API

Use the Core API - OAuth

Understand OAuth configuration in Okta

Understand API Access Management

• Dynamic Client Registrations API
• API Access Management
• Enable Consent using the APIs
• Create an Authorization Server
• OpenID Connect & OAuth 2.0 API - Introspect Endpoint

Use the Core API - Apps

Understand applications in Okta

• Application Properties
• Apps API
• Apps API - Request Parameters
• Apps API - List groups assigned to application

Debug API-Related Issues

Investigate API-related issues using sys log, Administrator Dashboard, APIs, and tasks

• Okta Error Codes and Descriptions
• Users API - List Users

Debug API Requests

Determine when to make API calls

Valid user states for API calls

• Okta Error Codes and Descriptions
• Rate Limits
• Authentication API
• Users API

• Pagination
• Media Types
• Cross-Origin Resource Sharing (CORS)

Okta API Rate Limiting

Read and Understand the Okta API Rate Limiting

• Rate Limits

Redirect or CORS as Trusted Origin

Identify when to use Redirect or CORS as Trusted Origin

• Enable CORS
• Trusted Origins API

App Logout and Global Logout

Implement App Logout and Global Logout (Okta)

• Okta Sign-in Widget - authClient
• Auth SDK for JS
• Sign users out of your app

Okta Hooks

Inline Hooks

Implement token inline hooks

Implement registration inline hooks

Implement SAML assertion inline hooks

Implement password import inline hooks

• Token Inline Hook Reference
• Registration Inline Hook Reference
• SAML Assertion Inline Hook Reference
• Password Import Inline Hook Reference

Create event hooks

Implement event hook objects

Implement event hook auth scheme objects

• Event Hooks - Create
• Event Hooks - AuthScheme Object

Okta Sign-in Widget Customization and Configuration

Configure and customize the Okta Sign-In Widget

• Okta Sign-In Widget Guide
• Github - Okta Sign-In Widget

Onboard new users using Okta’s Management SDK and User and Group APIs

Manage users with Okta’s Management SDK and User and Group APIs

Users API

Groups API

Federate an App through OIDC

Provide federated access to an app using OIDC

Display claim data from the ID token

Securing an API using OAuth and Securely accessing an API from a client app using OAuth

Secure an API using OAuth by verifying there is a valid bearer of token

Securely access API from a client application using OAuth in Okta

Implement OAuth for Okta

Authorization Code Flow

Implement the Okta Sign-In Widget for Authentication Purposes

Implement a custom authentication experience with the Okta Sign-In Widget

Implement and enforce multifactor authentication

Create a session for a user

Okta Sign-In Widget Guide

 GitHub - Okta Sign-In Widget