Auto login via company okta dashboard

[developer1]

Hi There,

I have a single-page web app and I have added an okta signing widget by following this tutorial https://developer.okta.com/blog/2020/07/15/secure-serverless-functions-with-netlify (https://github.com/oktadeveloper/okta-netlify-function-example/blob/master/client/index.js)
successfully. Also, made okta verification for app APIs.

it is working fine. it allows an employee to log in to the web app before access app functionality.

But I want an employee can directly access web App functionality (No need to login on App again) by click on the web App tile at the company Okta dashboard. and redirect to the Web APP.

What do I need to change in the code here https://github.com/oktadeveloper/okta-netlify-function-example/blob/master/client/index.js?

Thank you

[andrea]

You likely want to look into supporting SSO. When they user logs into Okta, an Okta session is created for them in their browser, setting a session cookie called ‘sid.’ This session can be used by your application to get tokens for the user without asking them to sign in again.

Our Auth JS SDK has a couple of methods that can help:

• session.exists() will make a CORS request to https://oktaDomain/api/v1/sessions/me to see if this cookie is available
• token.getWithoutPrompt(options) will silently make an authorize request to get tokens for the user without prompting them to re-authenticate. They MUST have an Okta session for this to succeed, otherwise a login_required error will be thrown

Note, these calls will fail if your browser blocks third party cookies (such as Safari with “Prevent Cross Site Tracking” enabled an Chrome Incognito by default) and your app is hosted on a separate domain from your Okta tenant). More details here.

With these methods, you can 1) determine if the user is signed into Okta, thus are able to get tokens or 2) determine that they need to log into Okta and should be shown the widget

[abraham.acaisoft]

There is a way to achieve this approach without using third party cookies or without use cookies at all?

[andrea]

Not really? The Okta session is tracked with cookies and users won’t be able to log into the app without needing to re-auth if they don’t have this session.

[abraham.acaisoft]

Ok, thank you so much.