OKTA Configuration

1. Sign in to OKTA with your administrator account and navigate to the Applications tab.
2. Add Application
   1. Select the Web application type
   2. Base URI: CloudFront distribution domain name (https://{cf-endpoint}.cloudfront.net)
   3. Login Redirect URI: CloudFront distribution domain name with callback path (https://{cf-endpoint}.cloudfront.net/_callback)
   4. Group Assignments: Optional
   5. Grant Type Allowed: Authorization Code
   6. Done
3. Gather the following information for Lambda configuration
   1. Client Id and Client Secret from the application created in our previous step (can be found at the bottom of the general tab)
   2. Base Url
      1. This is named the 'Org URL' and can be found in the top right of the Dashboard tab.
4. Execute ./build.sh in the downloaded directory. NPM will run to download dependencies and a RSA key will be generated.
5. Choose OKTA as the authorization method and enter the values for Base URL (Org URL), Client ID, Client Secret, Redirect URI, and Session Duration
6. Upload the resulting zip file found in your distribution folder using the AWS Lambda console and jump to the configuration step