Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →webiny/webiny-configure-okta
Configuring Okta as an identity provider (IDP) for Webiny projects.
Passed 22 of 22 test cases with the skill, and 7 of 22 without it.
and 20 more in the full report
15 fixed7 passed either way0 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 15 test cases the skill fixed. Same model, same prompt, with and without the skill.
When using OktaIdpConfig.createImplementation without external services, what value should be passed to the dependencies property?
| Checked | Without skill | With skill |
|---|---|---|
| Passes an empty array [] to dependencies when no external services are required | Missed | Passed |
The instructions your model reads when the skill loads.
Webiny supports Okta as an external identity provider (IDP) to replace the default Cognito authentication. First, install the @webiny/okta package (using the same version as the webiny dependency in package.json). Then create two files: an API config class that maps Okta JWT claims to Webiny identity data (OktaIdpConfig), and a React extension component (<Okta />) that wires issuer URL, client ID, and the API config path. Register the extension in webiny.config.tsx, set two environment variables (OKTA_ISSUER, OKTA_CLIENT_ID), and deploy.
Okta integration has two parts:
OktaIdpConfig.Interface that maps JWT token claims to Webiny's identity structure. Registered via OktaIdpConfig.createImplementation() (the universal DI pattern).<Okta /> from @webiny/okta, passing the issuer URL, client ID, and path to the API config file. The <Okta /> component handles environment variable injection, API extension registration, and Admin login screen setup automatically.<Okta /> Works InternallyThe <Okta /> component (from @webiny/okta) is a defineExtension that:
OKTA_ISSUER, OKTA_CLIENT_IDREACT_APP_IDP_TYPE=okta, REACT_APP_OKTA_ISSUER, REACT_APP_OKTA_CLIENT_IDOktaIdpFeature API extension (OIDC token verification)OktaIdpConfig.Interface| Method | Signature | Required | Description |
|---|---|---|---|
getIdentity | (token: JwtPayload) => OktaIdentity | Promise<OktaIdentity> | Yes | Maps JWT claims to Webiny identity data |
verifyTokenClaims | (token: JwtPayload) => void | Promise<void> | No | Custom claim verification (throw to reject the token) |
OktaIdentity (Return Type of getIdentity)| Field | Type | Description |
|---|---|---|
id | string | Unique user ID (typically token["sub"]) |
displayName | string | User's display name |
roles | string[] | Webiny security roles to assign |
teams | string[] | Webiny teams (optional, filter out falsy values) |
test cases passed, vs 7 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.