Using AppAuth with Okta

Since Okta is a certified OpenID Connect provider and supports PKCE by default, configuration is quick and simple. There are no additional libraries or tools required.

Add an OpenID Connect Client

You can create an Okta developer account at https://developer.okta.com/.

1. After login, navigate to https://{{yourOrg}}-admin.oktapreview.com/admin/apps/add-app and select Create New App
2. Choose Native as the platform, Sign on method as OpenID Connect then select Create.
3. Populate your new OpenID Connect application with values similar to:

Setting	Value
Application Name	OpenId Connect App (must be unique)
Login redirect URIs	com.oktapreview.yoursubdomain://callback_url
Logout redirect URIs	com.oktapreview.yoursubdomain://callback_url
Allowed grant types	Authorization Code

1. Click Finish to redirect back to the General Settings of your application.
2. Copy the Client ID, as it will be needed for the client configuration.

Note: As with any Okta application, make sure you assign Users or Groups to the OpenID Connect Client. Otherwise, no one can use it.

1. Finally, within your application update res/raw/auth_config.json with your settings. You will get a warning if it is incomplete or invalid. Here is an example JSON configuration:

{
"client_id": "{{YourClientID}}",
"redirect_uri": "com.oktapreview.{{yourOrg}}:/oauth",
"end_session_uri": "com.oktapreview.{{yourOrg}}:/{logoutCallback}",
"authorization_scope": "openid email profile",
"discovery_uri": "https://{{yourOrg}}.okta.com/.well-known/openid-configuration"
}