Create an Okta application
To create an Okta application for BloodHound, complete the following steps:1
Create a new Okta application
Follow the Okta documentation to create a new application.
Set your application type to Native.
2
Configure the Okta application
When configuring the Okta application, use the following settings:
| Field | Value |
|---|---|
| Login redirect | https://{domainname}/api/v2/sso/{chosenProviderName}/callbackExample: https://test.bloodhoundenterprise.io/api/v2/sso/bhestandard/callback |
| Logout redirect | https://{domainname}/Example: https://test.bloodhoundenterprise.io/ |
3
Create custom claims
If you want to map additional user attributes (first name, last name, role) from Okta to BloodHound, you must create custom claims in Okta.Go to Security > API > Authorization Servers > Claims and create the following claims:
- First name
- Last name
- Role
| Field | Setting |
|---|---|
| Name | first_name |
| Include in token type | ID Token → Always |
| Value type | Expression |
| Value | user.firstName |
| Include in | Any scope (or Profile) |