How to Validate OKTA token is valid or not in C#

ashwinikumarmishra · November 9, 2018, 3:06pm

We have UI application in Asp.net which is being logged-in using OKTA SSO, and Asp .net web page calling Web API, at web api we want to make sure that call is being done by valid user. For that I am looking for below solution.

Step 1:- Get token from OKTA SSO and then pass it to Web API
Step 2:- Web API will validate this token using some OKTA API to make sure that token is valid.

Question 1:- How to get OKTA SSO token at ASP.net page
Question 2:- How to validate token got in Step 1.

Thanks in advance,
Regards,
Ashwini

jmelberg · November 14, 2018, 5:52am

Hi @ashwinikumarmishra,

Did you have a chance to try the JWT Validation Guide for .NET? That tutorial should have everything you need to validate a token locally.

Alternatively, you can use any networking library to introspect the token via Okta’s /introspect endpoint.

system · January 12, 2024, 11:56pm

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.