Using Access token as Bearer token as authentication for REST endpoints

Questions OAuth/OIDC
1

Is it possible to pass a users access token to an api gateway which then calls Okta’s REST endpoints and authenticates via a bearer token?

 ┌───┐                ┌───────────┐                     ┌────┐
 │SPA│                │API Gateway│                     │Okta│
 └─┬─┘                └─────┬─────┘                     └─┬──┘
   │/change_password        │                             │   
   │Param: {{ACCESS_TOKEN}} │                             │   
   │───────────────────────>│                             │   
   │                        │                             │   
   │                        │/change_password             │   
   │                        │Auth: Bearer {{ACCESS_TOKEN}}│   
   │                        │─────────────────────────────>   
   │                        │                             │   
   │                        │                             │
2

Hi @arzemieniuk

Yes, this is possible through “OAuth 2.0 for Okta APIs”. At this point, the feature is in open beta and you can apply here.

3

Thanks @dragos, unfortunately the dropdown list for “Okta Org Name” only shows “–None–”.

4

Hi @arzemieniuk

You can enroll into the beta program from oktapreview.com orgs on which you are a super administrator.

5

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.