PHPackages magedevgroup/module-admin-sso-okta - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Authentication & Authorization](/categories/authentication) 4. / 5. magedevgroup/module-admin-sso-okta ActiveMagento2-module[Authentication & Authorization](/categories/authentication) magedevgroup/module-admin-sso-okta ================================== Okta provider plugin for Magento 2 admin SSO — supplies the Okta OIDC preset (discovery, groups claim, branding) for the provider-agnostic admin-sso capability. Installs admin-sso (and sso-core) automatically. 0.0.1(1mo ago)00OSL-3.0PHPPHP ~8.3.0||~8.4.0||~8.5.0 Since Jul 8Pushed 1mo agoCompare [ Source](https://github.com/MageDevGroup-com/module-admin-sso-okta)[ Packagist](https://packagist.org/packages/magedevgroup/module-admin-sso-okta)[ RSS](/packages/magedevgroup-module-admin-sso-okta/feed)WikiDiscussions master Synced 1w ago READMEChangelogDependencies (3)Versions (2)Used By (0) MageDevGroup\_AdminSsoOkta ========================== [](#magedevgroup_adminssookta) > Okta login for the Magento 2 admin panel. [![License](https://camo.githubusercontent.com/83286826e7422502369a480c1cbde06eae433c866ac3e9054835db7296a11c9c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4f534c2d2d332e302d677265656e)](https://camo.githubusercontent.com/83286826e7422502369a480c1cbde06eae433c866ac3e9054835db7296a11c9c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4f534c2d2d332e302d677265656e) [![Magento](https://camo.githubusercontent.com/74f990c6f6a950cfc7707cb6d3cfdc731382be6260dfab995f14da50230e9117/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d6167656e746f2d322e342d6f72616e6765)](https://camo.githubusercontent.com/74f990c6f6a950cfc7707cb6d3cfdc731382be6260dfab995f14da50230e9117/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d6167656e746f2d322e342d6f72616e6765) [![PHP](https://camo.githubusercontent.com/49c1441e4607accdb38fb505c51c881b13dabea9a2726b234d7ad218befce9fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d382e332d2d382e352d626c7565)](https://camo.githubusercontent.com/49c1441e4607accdb38fb505c51c881b13dabea9a2726b234d7ad218befce9fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d382e332d2d382e352d626c7565) [![Version](https://camo.githubusercontent.com/6a24c9197bfc07f07d3f136dc182a76b14d3cd2f8d473fbc3729540c9a4c5410/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f76657273696f6e2d302e302e312d6c6967687467726579)](https://camo.githubusercontent.com/6a24c9197bfc07f07d3f136dc182a76b14d3cd2f8d473fbc3729540c9a4c5410/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f76657273696f6e2d302e302e312d6c6967687467726579) A thin Okta provider plugin for the provider-agnostic `admin-sso` capability. It supplies the Okta OIDC preset — discovery from your org domain, scopes, `groups` claim, login-button branding — while all OIDC protocol lives in `sso-core` and all admin logic in `admin-sso`. Installing it pulls `admin-sso` and `sso-core` automatically. Installation ------------ [](#installation) ``` composer require magedevgroup/module-admin-sso-okta bin/magento module:enable MageDevGroup_SsoCore MageDevGroup_AdminSso MageDevGroup_AdminSsoOkta bin/magento setup:upgrade ``` Create the Okta OIDC app ------------------------ [](#create-the-okta-oidc-app) In the Okta Admin Console → **Applications → Create App Integration**: 1. Sign-in method **OIDC - OpenID Connect**, application type **Web Application**. 2. **Sign-in redirect URI** — the `admin-sso` callback: `https:////adminsso/sso/callback`(`` is the backend frontName, default `admin`). It must match the admin URL used at runtime exactly. 3. Save, then copy the **Client ID** and **Client secret**. 4. **Groups claim** — for IdP-group → ACL-role mapping, add a `groups` claim to the ID token: **Sign On → OpenID Connect ID Token → Groups claim**, filter e.g. `Matches regex .*`. Without this Okta emits no groups and role mapping falls back to the default role. Configuration ------------- [](#configuration) Admin → Stores → Configuration → **MageDevGroup → Admin SSO**. **General** (`magedevgroup_admin_sso/general/*`): FieldValueEnable Admin SSOYesIdentity ProviderOktaClient IDfrom the Okta appClient Secretfrom the Okta app**Okta** (`magedevgroup_admin_sso/okta/*`, shown when Okta is selected): FieldValueOrg Domainyour org domain, e.g. `dev-123.okta.com` (scheme optional, `https` assumed)Custom Authorization Serveroptional server id (e.g. `default`); empty = org serverThe discovery URL is derived from these: `https:///.well-known/openid-configuration`, or `https:///oauth2//.well-known/openid-configuration` with a custom authorization server. Group → role mapping and enforce-SSO/break-glass are configured in `admin-sso`; see that module's README. Requirements ------------ [](#requirements) - Magento **2.4.x** - PHP **8.3 – 8.5** Part of the MageDevGroup identity suite --------------------------------------- [](#part-of-the-magedevgroup-identity-suite) RepoRole`sso-core`Shared OIDC engine (installed automatically)`admin-sso` · `admin-sso-`Admin-panel SSO login`customer-sso` · `customer-sso-`Storefront SSO login`admin-scim` · `admin-scim-`Admin-user provisioning (SCIM 2.0)License ------- [](#license) [OSL-3.0](LICENSE) © MageDevGroup. Commercial licensing and support: . ### Health Score 36 — LowBetter than 79% of packages Maintenance90 Actively maintained with recent releases Popularity0 Limited adoption so far Community6 Small or concentrated contributor base Maturity41 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Unknown Total 1 Last Release 49d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/6d5acdc656153eb172422ac03f4a59806116de32da5f861c4b00e4ac7bb9c544?d=identicon)[magedevgroup](/maintainers/magedevgroup) --- Top Contributors [![mageown](https://avatars.githubusercontent.com/u/2058487?v=4)](https://github.com/mageown "mageown (1 commits)") ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/magedevgroup-module-admin-sso-okta/health.svg) ``` [![Health](https://phpackages.com/badges/magedevgroup-module-admin-sso-okta/health.svg)](https://phpackages.com/packages/magedevgroup-module-admin-sso-okta) ``` ### Alternatives [fastly/magento2 Fastly CDN Module for Magento 2.4.x 1564.5M1](/packages/fastly-magento2)[checkoutcom/magento2 Checkout.com Payment Gateway for Magento 2 34280.5k3](/packages/checkoutcom-magento2)[myparcelnl/magento A Magento 2 module that creates MyParcel labels 1861.2k](/packages/myparcelnl-magento)[hryvinskyi/magento2-invisible-captcha Magento 2 multi-provider invisible captcha & bot protection (Google reCAPTCHA v2/v3/Enterprise and Cloudflare Turnstile) for form-level and route-level protection 299.6k](/packages/hryvinskyi-magento2-invisible-captcha)[mage-os/module-automatic-translation Automatic AI content translation for Mage-OS. 3223.7k](/packages/mage-os-module-automatic-translation)[loki/magento2-components Core module for defining Alpine.js components with advanced AJAX features 1015.1k29](/packages/loki-magento2-components) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)