This app demonstrates integrating an Okta OpenID Connect application with Spring Boot.
You can deploy directly to Heroku and provision an Okta org at the same time!
The app is already configured to integrate with your new Okta org.
When you click the purple button above, you'll give the app a unique name to run in Heroku.
You can SSO to your Okta Admin Console from the Heroku Dashboard and, you can launch this app as shown below:
You can also see the environment variables that have been set in your application as part of the Okta provisioning process.
Use the OKTA_ADMIN_EMAIL
and OKTA_ADMIN_PASSWORD
values to log in to this app:
This application also demonstrates Single Sign-On across multiple OpenID Connect applications with multiple Authorization Servers defined in Okta.
To use this sample application, you need to create a free developer Okta org. You can do that by going to https://developer.okta.com.
Then, you create two OpenID Connect applications in Okta and run two instances of this application. You can SSO between them!
For more detail about OpenID Connect and how to use this app, check out the blog post here.
run:
mvn clean install
Included in this repo is a shell script to make it easy to run the app. It works on Mac and Linux:
./run_app.sh \
--ci <client id for oidc app> \
--cs <client secret for oidc app> \
--is <issuer for oidc app>
If you're on a different system, you can also run the app directly with maven:
mvn spring-boot:run \
-Dokta.oauth2.clientId=<client id for oidc app> \
-Dokta.oauth2.clientSecret=<client secret for oidc app> \
-Dokta.oauth2.issuer=<issuer for oidc app>