Third-Party Provider Compatibility (e.g., SecureAuth)

I’m currently evaluating the okta-mobile-kotlin library for use in an Android application. We are considering using a third-party identity provider (IdP) such as SecureAuth, rather than Okta’s own services.

The documentation and examples primarily focus on Okta as the IdP. I would like to clarify whether okta-mobile-kotlin is designed to be exclusively used with Okta, or if it can be configured to work with other OpenID Connect (OIDC) compliant providers like SecureAuth.

Specifically, I’d like to know:

  • Is the library inherently tied to Okta-specific endpoints or features?
  • Are there any configuration options or customizations that allow for the use of a different OIDC provider?
  • If third-party providers are supported, are there any known limitations or considerations I should be aware of?
  • If third party providers are supported, are there any examples or documentation that can be provided on how to configure the library to work with them?

Expected Behavior:

Ideally, the library would allow for configuration to point to a different OIDC provider’s endpoints (e.g., authorization, token, userinfo).

Actual Behavior:

The current documentation and examples focus solely on Okta.

Far as I know, our SDKs are only tested against Okta so we cannot confirm that they will work with other Identity Providers.

That said, okta-mobile-kotlin’s configuration takes an issuer value and it looks like the SDK is designed to call the /well-known/openid-configuration endpoint to retrieve the OIDC endpoints for the issuer.

In which case, it may very well work with an OpenID Connect compliant provider, but you will need to test this yourself to see if it works and we might not be able to confirm that a future change to the library will not cause it to stop working with another IdP.

1 Like

I agree with @andrea. @joaquini definitely test it out, knowing that SecureAuth may implement OIDC similar to Okta and you can double check side-by-side with our docs:

Curious to know design differences, if any…that’s, of course, if you decide to test.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.