/okta-spike

A spike on Okta and how to integrate it with various services like Jenkins and AWS

Objectives

Integrate Okta with Jenkins (and with AWS in the future)

What is Okta?

It's an enterprise-grade, identity management service, built for the cloud, but compatible with many on-premises applications. With Okta, IT can manage any employee's access to any application or device. Okta runs in the cloud, on a secure, reliable, extensively audited platform, which integrates deeply with on-premises applications, directories, and identity management systems.

You can read all above Okta and what it does here

Jenkins integration with Okta

  • Vagrantfile is provided if you would like to use it as a throw away docker environment
  • Deploy Jenkins and install plugins
    • docker container run --rm --name jenkins -d -p 8080:8080 jenkins/jenkins:lts
    • docker container ls --latest (Check if Jenkins is up and running)
    • docker container logs -f jenkins (Jenkins' logs. Admin password will be visible)
      • Retrieve Jenkins admin password in case you are not able to spot it in the console logs docker container exec -it jenkins cat /var/jenkins_home/secrets/initialAdminPassword
    • Navigate to http://[HOSTNAME]:8080 and follow on-screen instructions
    • Select suggested plugins. It will take a min or two to install the plugins
    • Install SAML & Role-based Authorization Strategy plug-ins and let Jenkins restart itself if it needs to
  • Follow Okta-Jenkins-integration configurations described in this doc: SAML Authentication with Okta SSO and users groups

AWS integration with Okta (future work)

References