I’m looking for the best practice to make requests as a third-party app to Google Drive’s APIs that are authenticated with Okta.
Assumptions:
- Google’s services are being authenticated using Okta (User go to drive.google.com >> redirect to Okta >> authentication >> Google Drive is available).
- We have a public app on Google - all works easily for non-Okta users.
What will be the best practice solution? Creating an Okta app? Exchanging access tokens in runtime? Something else?