OKTA Integration for custom groups claim

[deva raj]

Hi Team,

We would like to integrate the custom claim groups from OKTA, specifically "groups_GoCD," instead of using the default groups. Is this possible?

- OKTA Plugin Version: 2.0.1-96  
- GoCD Version: 25.1.0  

While basic authentication is functioning correctly in OKTA, authorization is failing due to the default groups being used, which is causing a redirect issue.

In OKTA, a custom group claim named "groups_GoCD" has been created.

Request URL

https://xxx.devops.com/go/plugin/cd.go.authorization.okta/login

 

location

https://xx.oktapreview.com/oauth2/default/v1/authorize?client_id=0oa2gsu8qvn1ka3nI0h8&redirect_uri=https%3A%2F%2Fxx.devops.com%2Fgo%2Fplugin%2Fcd.go.authorization.okta%2Fauthenticate&response_type=code&scope=openid%20profile%20email%20groups&state=6e8483c8-c03f-460b-90f0-f8ec6d79b415&nonce=ce6fc6c2-c026-4e0a-8195-c6a439fe71b6

Regards,

Devaraj

 

[deva raj]

Hi Team,

can someone check and let me know whether it's feasible or not?

[Chad Wilson]

This is just a community mailing group. It's not a support mailbox. Please try and adjust your tone accordingly.

Besides, the okta plugin was developed by a 3rd party and later donated to the community, not made it actively maintained by the GoCD team.

What do you mean by 'redirect issue'? Did you create a role configuration to map okta groups to GoCD roles?

You might be better to describe what you have configured in more detail (what you have tried/configured, what you want to happen, what is happening) - maybe on the GitHub at https://github.com/gocd-contrib/gocd-okta-oauth-authorization-plugin/blob/master/INSTALL.md since that is in context.

-Chad

--
You received this message because you are subscribed to the Google Groups "GoCD Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to go-cd+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/go-cd/1f7eb6ff-cc8d-4508-9521-0c5988e2cfb3n%40googlegroups.com.