ContextQMD
Back to Lobehub

Configuring Okta Authentication for LobeHub

docs/self-hosting/auth/providers/okta.mdx

2.1.562.3 KB
Original Source

Configuring Okta Authentication

Okta is a leading identity and access management platform.

<Steps> ### Create Application in Okta
  1. Log in to Okta Admin Console
  2. Go to Applications > Applications
  3. Click Create App Integration
  4. Select:
    • Sign-in method: OIDC - OpenID Connect
    • Application type: Web Application
  5. Configure the application:
    • App integration name: LobeHub
    • Sign-in redirect URIs: Add your callback URL

<Callout type={'info'}> Callback URL Format: https://your-domain.com/api/auth/callback/okta </Callout>

  1. After creation, note down the Client ID and Client Secret

Get Issuer URL

The issuer URL is typically: https://your-okta-domain.okta.com

For custom authorization servers: https://your-okta-domain.okta.com/oauth2/default

Configure Environment Variables

When deploying LobeHub, you need to configure the following environment variables:

Environment VariableTypeDescription
AUTH_SECRETRequiredKey used to encrypt session tokens. Generate using: openssl rand -base64 32
AUTH_SSO_PROVIDERSRequiredSSO provider for LobeHub. Use okta for Okta
AUTH_OKTA_IDRequiredClient ID from Okta application
AUTH_OKTA_SECRETRequiredClient Secret from Okta application
AUTH_OKTA_ISSUERRequiredOkta issuer URL (e.g., https://your-okta-domain.okta.com)

<Callout type={'tip'}> Go to 📘 Environment Variables for detailed information on these variables. </Callout> </Steps>

<Callout type={'info'}> After successful deployment, users will be able to authenticate with Okta and use LobeHub. </Callout>