Webiny Configure Okta
Configuring Okta as an identity provider (IDP) for Webiny projects.
Install
npx skills add webiny/webiny-js --skill webiny-configure-okta -g -a claude-code -y- Repository
- webiny/webiny-js8.1k
- Category
- Engineering
- Updated
- 5d ago
- License
- See repository
- Context cost
- Mediumabout 2,479 tokens
- Runs scripts
- No, instructions only
What it does
Configuring Okta as an identity provider (IDP) for Webiny projects. Use this skill when the developer asks about Okta authentication, Okta SSO, replacing Cognito with Okta, setting up external identity providers, configuring OIDC authentication, mapping JWT claims to Webiny identities, or customizing the Okta login flow. Also relevant when asking about OKTA_ISSUER, OKTA_CLIENT_ID environment variables, OktaIdpConfig, or the MyOktaExtension pattern.
Configure Okta Authentication
TL;DR
Webiny supports Okta as an external identity provider (IDP) to replace the default Cognito authentication. First, install the @webiny/okta package (using the same version as the webiny dependency in package.json). Then create two files: an API config class that maps Okta JWT claims to Webiny identity data (OktaIdpConfig), and a React extension component (<Okta />) that wires issuer URL, client ID, and the API config path. Register the extension in webiny.config.tsx, set two environment variables (OKTA_ISSUER, OKTA_CLIENT_ID), and deploy.
Pattern / Core Concept
Okta integration has two parts:
- API Config, A class implementing
OktaIdpConfig.Interfacethat maps JWT token claims to Webiny's identity structure. Registered viaOktaIdpConfig.createImplementation()(the universal DI pattern). - Extension Component, A React component that renders
<Okta />from@webiny/okta, passing the issuer URL, client ID, and path to the API config file. The<Okta />component handles environment variable injection, API extension registration, and Admin login screen setup automatically.
How <Okta /> Works Internally
The <Okta /> component (from @webiny/okta) is a defineExtension that:
- Sets Lambda env vars:
OKTA_ISSUER,OKTA_CLIENT_ID - Sets Admin app env vars:
REACT_APP_IDP_TYPE=okta,REACT_APP_OKTA_ISSUER,REACT_APP_OKTA_CLIENT_ID - Registers the internal
OktaIdpFeatureAPI extension (OIDC token verification) - Registers your custom API config extension (identity mapping)
- Registers the Admin Okta login screen extension
