Ensure OIDC Authentication Works with Okta

Description

Problem description

Okta is a leading cloud identity provider used by many enterprises. Compatibility with Okta is essential for widespread adoption. Also we aim to have Okta partnership and have PSMDB listed in Okta’s marketplace -

User story

As a system administrator using Okta,

I want to configure Percona Server for MongoDB to authenticate users via Okta,

So that I can use our corporate identity provider for database access control.

Acceptance criteria

  • Percona Server for MongoDB can validate OIDC tokens issued by Okta.

  • Claims (e.g., groups, roles) from Okta can be mapped to MongoDB roles.

  • Configuration steps are documented for Okta integration - equal as - Okta tab.

Design / Solution Proposal

  • Test JWT token validation against Okta’s OpenID configuration endpoint.

  • Ensure Okta’s claims format is correctly interpreted for role mapping.

  • Document step-by-step setup for Okta integration.

Environment

None

Activity

Details

Assignee

Reporter

Labels

Needs QA

Yes

Needs Doc

Yes

Priority

Smart Checklist

Created February 14, 2025 at 2:18 PM
Updated February 24, 2025 at 5:33 PM