Breadcrumbs

Create and configure the Yarken OIDC application in Okta

Create an OpenID Connect application in Okta to authenticate users to Yarken. You'll configure the Yarken redirect URIs, assign the appropriate groups, and create a Groups claim so Yarken can determine each user's role-based access.

Before you begin

Make sure that:

  • You've created the required Yarken role groups in Okta.

  • You've assigned users to the appropriate groups.

  • You have the Sign-in Redirect URI provided by Yarken.

  • You have the Sign-out Redirect URI provided by Yarken.

  • Your Okta account can create applications and configure authorization server claims.

Create the OIDC application

  1. In the Okta Admin Console, go to Applications > Applications.

  2. Select Create App Integration.

    image-20260808-182140.png

The Create a new app integration window opens.

  1. For the sign-in method, select OIDC – OpenID Connect.

  2. For Application type, select Web Application.

    image-20260808-182235.png

  3. Select Next.

The application configuration page opens.

Configure the application

  1. Enter an App integration name, for example, Yarken Test App.

  2. In Sign-in redirect URIs, select + Add URI, then enter the Sign-in Redirect URI provided by Yarken.

    Example:

    https://<your-subdomain>.yarken.com/auth/login/oidc/callback

  3. In Sign-out redirect URIs, select + Add URI, then enter the Sign-out Redirect URI provided by Yarken.

    Example:

    https://<your-subdomain>.yarken.com/auth/logout

image-20260808-182256.png

Important: The URLs above are examples. Use the redirect URIs provided by the Yarken implementation team for your environment.

  1. In Assignments, select Limit access to selected groups.

  2. Assign the appropriate Yarken role group or groups to the application.

    image-20260808-182324.png

  1. Select Save.

Okta creates the OIDC application and opens its General page. You can edit the assigned groups later if required.

Create the Groups claim

Configure Okta to include users' group memberships in the ID token. Yarken uses this information to determine the roles assigned to each authenticated user.

  1. In the Okta Admin Console, go to Security > API.

  2. Select the Authorization Servers tab.

  3. Select the default custom server.

    image-20260808-182354.png

  4. Open the Claims tab.

  5. Select Add Claim.

    image-20260808-182534.png

  6. Configure the claim as follows:

Setting

Value

Name

Enter a claim name, for example, group

Include in token type

Select ID Token and Always

Value type

Groups

Filter

Select Matches regex and enter ^Yarken.*

Disable claim

Leave unselected

Include in

Any scope
image-20260808-182655.png

  1. Select Save.

Important: Enter the regular expression exactly as ^Yarken.*. It uses a caret (^), period (.), and asterisk (*).

The Groups claim enables Okta to include matching Yarken group memberships in the ID token sent to Yarken.

Next step

Share Okta application details with Yarken

Related content