Configuring Authentication for the Console via OKTA SSO (OAuth)

Configuration steps for managing Console access via Okta SSO

Version(s)

• Capsule8 Console version 4.4.1+

OAuth Configuration

Okta

• Add Capsule8 to your Okta applications

  • From the Okta admin interface, click Applications then Add Application.
  • Find Capsule8 in the Okta Integration Network and follow the instructions for setting it up.

• Set console.auth_okta_id and console.auth_okta_secret to the Client ID and Client secret of the application in the configuration file. These can be found in the "Sign On" tab of the just-added application.

• Set auth_okta_issuer in the configuration file to the Okta “Issuer URI” following the below steps.

  • For most installations, the the Issuer URI will be in the format 

    auth_okta_issuer: "https://<domain>.okta.com/oauth2"

  • If using "custom" authorization servers as described in this guide, the URI will be in the format 

    auth_okta_issuer: "https://<domain>.okta.com/oauth2/<server-id>"

 An example configuration file: 

console:
  auth_okta_id: OoXtyDwbBuSD98DF2
  auth_okta_secret: ********************
  auth_okta_issuer: "https://mycompany.okta.com/oauth2"