Secure AEM Graphql Endpoint With OAuth OKTA

[beast42]

Hi All,

We have a business requirement where we need to secure AEM graphql endpoint with OKTA. It will be used for application to application authentication. 

We are using AEM 6.5 Serve pack 13. (Not on AEM as a cloud service)

In our case, AEM will be the resource owner, 3rd party application will be client and OKTA will be the authorization server.  Has anyone implement something like this before in AEM?

[Aditya_Chabuku]

Hi @beast42 ,

Please try to follow this article, I think this might be useful for you.

https://wttech.blog/blog/2019/how-to-setup-aem-publish-saml-authentication-using-okta/ 

Thanks,

Aditya Chabuku

[beast42]

Thanks for the reply.

We are not trying to setup user authentication via saml (okta). 

We need to implement application to application authentication using oauth okta 

[Saravanan_Dharmaraj · Accepted solution]

Are you looking for https://medium.com/tech-learnings/how-to-manage-the-protected-aem-resources-through-oauth-2-0-851ce4... , protecting the graphql endpoint before executing the query?