API access administration
So, let’s go into the Okta administrator panel to set up some of the features that we examined in the previous section. Navigate to Security | API. Here, we can see that we have three tabs we can work with:
- Authentication Servers
- Tokens
- Trusted Origins
This is what it looks like in the admin panel:
Figure 8.3 – Available tabs for API management
Since we discussed Tokens and Trusted Origins earlier in this chapter, we will now only focus on Authorization Servers. If you don’t have the API Access Management product enabled, you will only see this menu for the default org authorization server, as explained next.
Authorization server
Let’s begin by understanding the purpose of an authorization server. An authorization server is essentially a tool that generates and validates OAuth 2.0 or OIDC tokens. It serves various roles, such as providing authentication for OIDC applications...
