Can I use Org Auth Server for protecting my backend APIs?

Questions
1

I have SPA in Angular with a dotnet core backend. When the app is accessed by a user he gets redirected to Okta for login. Once the user is authenticated the app can retrieve data from the backend. But… the backend endpoints are not protected. My company only provides access to the Org Authorization Server so I can’t customize it. I need a way to send the access token to the backend API to protect the endpoints there. That access token needs to include also group claims. How can I do that?

Thanks

2

Create a new developer account at https://developer.okta.com and you’ll get API access management for free! If you want to use your company’s account (that doesn’t have API Access Management), I don’t think it’s possible.

3

So, just to be sure. In this case I can’t use the information below to authorize the backend?

Screenshot_38
Screenshot_38771×436 20.6 KB

4

That is correct. Authorization Servers | Okta Developer

1 Like
5

ok, thanks for confirming

6

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.