Self Hosted Sign Widget PIV

Questions
1

Hello,

My organization uses the PIV/Smart Card feature in production now, it is hosted on Okta. We are trying to move to a self hosted sign on widget, and all the features work except the PIV.

When a PIV/CAC user clicks the PIV button the get a CORS exception in the console. We have enabled CORS/Redirect from the sign on url in the Trusted Origins section.

This is our PIV configuration for the OktaSignIn. The host in this example is something like myorg.oktapreview.com.

piv: {
        certAuthUrl: `https://${host}/login/cert`,
        text: 'Authenticate with a CAC Card',
        className: style.piv,
        isCustomDomain: false
},

Thanks in advance!

1 Like
2

it should be

certAuthUrl: 'https://your_tenant_name.mtls.okta.com/api/internal/v1/authn/cert',
1 Like
3

Thanks This endpoint was able to authenticate a CAC user. Is there anyway to redirect to a different audience.

Currently once a user authenticates they are redirected to the Okta home page. How would I redirect them back to an application like https://mysubdomain.myorg.com/oauth2/idpresonse?

1 Like
4

Please refer to a regular widget configuration. If you can configure a widget w/o PIV to redirect to a different URL, then PIV will work the same way, I assume

5

@phi1ipp – I have dug and dug about how to do a correct redirect with PIV sign-in widget implementation to no avail

@danatgovini – were you able to figure this out?

Here is a link to topic I just posted.

1 Like
6

@anthony.sessa, yeah I figured the same thing unfortunately. Maybe it’s worth opening a ticket on https://github.com/okta/okta-signin-widget, if it doesn’t exist yet

1 Like
7

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.