Add and configure packages

Next you need to add an Okta SDK to your application.

• ASP.NET
• ASP.NET Core 2.x
• ASP.NET Core 3.x
• Go
• Node Express
• PHP
• Spring Boot

All of our .NET SDKs are hosted on NuGet. Install the following dependencies in your project:

• Okta.AspNetCore 3.0.0 or higher

You can install them via the NuGet Package Manager:

1. In the Solution Explorer, right-click on your solution and select Manage Nuget Packages for Solution.
2. Click Browse and search for the package you want to install, for example, Okta.AspNetCore.
3. Select your package and click Install.

Or via the dotnet CLI:

$ dotnet add package Okta.AspNetCore

Configure the package

You need the following values from the Okta Application and the Developer Console that you worked with in Create an Okta application:

• Client ID — Find it in the applications list or on the application's General tab.
• Client Secret — Find it on the application's General tab.
• Okta Domain — Find it on the Developer Console dashboard in the upper-right corner as the Org URL.

You can configure the properties of your application with configuration files, environment variables, or other framework specific techniques.

• ASP.NET
• ASP.NET Core 2.x
• ASP.NET Core 3.x
• Go
• Node Express
• PHP
• Spring Boot

Open your Startup class and modify the ConfigureServices method to include the Okta middleware configuration. Replace the placeholders with your Okta configuration:

public void ConfigureServices(IServiceCollection services)
{
    //...
    services.AddAuthentication(options =>
    {
        options.DefaultAuthenticateScheme = CookieAuthenticationDefaults.AuthenticationScheme;
        options.DefaultSignInScheme = CookieAuthenticationDefaults.AuthenticationScheme;
        options.DefaultChallengeScheme = OktaDefaults.MvcAuthenticationScheme;
    })
    .AddCookie()
    .AddOktaMvc(new OktaMvcOptions
    {
        // Replace these values with your Okta configuration
        OktaDomain = "https://${yourOktaDomain}",
        ClientId = "{clientId}",
        ClientSecret = "{clientSecret}"
    });

    services.AddControllersWithViews();
}

Okta middleware uses the default Custom Authorization Server by default. If you are using an Authorization Server other than the default, make sure to configure it by setting up the AuthorizationServerId. If you are using the Org Authorization Server, your middleware configuration should look like this:

public void ConfigureServices(IServiceCollection services)
{
    //...
    .AddOktaMvc(new OktaMvcOptions
    {
        // Replace these values with your Okta configuration
        OktaDomain = "https://${yourOktaDomain}",
        ClientId = "{clientId}",
        ClientSecret = "{clientSecret}",
        AuthorizationServerId = "",
    });
}

Modify the Configure method to include the app.UseAuthentication() and app.UseAuthorization() lines:

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    //...
    app.UseAuthentication();

    app.UseAuthorization();

    app.UseEndpoints(endpoints =>
    {
        endpoints.MapControllerRoute(
            name: "default",
            pattern: "{controller=Home}/{action=Index}/{id?}");
    });
}

Finally, update your using statements to import Okta.AspNetCore and other required namespaces:

using Okta.AspNetCore;

The OktaMvcOptions class configures the Okta middleware. You can see all of the available options in the Configuration Reference section in the ASP.NET Core SDK readme.

Next: Redirect to the sign-in page