PHPackages magedevgroup/module-customer-sso-okta - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Authentication & Authorization](/categories/authentication) 4. / 5. magedevgroup/module-customer-sso-okta ActiveMagento2-module[Authentication & Authorization](/categories/authentication) magedevgroup/module-customer-sso-okta ===================================== Okta provider plugin for Magento 2 storefront SSO — supplies the Okta OIDC preset (discovery, groups claim, branding) for the provider-agnostic customer-sso capability. Installs customer-sso (and sso-core) automatically. 0.0.1(1mo ago)001OSL-3.0PHPPHP ~8.3.0||~8.4.0||~8.5.0 Since Jul 8Pushed 1mo agoCompare [ Source](https://github.com/MageDevGroup-com/module-customer-sso-okta)[ Packagist](https://packagist.org/packages/magedevgroup/module-customer-sso-okta)[ RSS](/packages/magedevgroup-module-customer-sso-okta/feed)WikiDiscussions master Synced 1w ago READMEChangelogDependencies (3)Versions (2)Used By (0) MageDevGroup\_CustomerSsoOkta ============================= [](#magedevgroup_customerssookta) > Okta login for the Magento 2 storefront. [![License](https://camo.githubusercontent.com/83286826e7422502369a480c1cbde06eae433c866ac3e9054835db7296a11c9c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4f534c2d2d332e302d677265656e)](https://camo.githubusercontent.com/83286826e7422502369a480c1cbde06eae433c866ac3e9054835db7296a11c9c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6c6963656e73652d4f534c2d2d332e302d677265656e) [![Magento](https://camo.githubusercontent.com/74f990c6f6a950cfc7707cb6d3cfdc731382be6260dfab995f14da50230e9117/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d6167656e746f2d322e342d6f72616e6765)](https://camo.githubusercontent.com/74f990c6f6a950cfc7707cb6d3cfdc731382be6260dfab995f14da50230e9117/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4d6167656e746f2d322e342d6f72616e6765) [![PHP](https://camo.githubusercontent.com/49c1441e4607accdb38fb505c51c881b13dabea9a2726b234d7ad218befce9fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d382e332d2d382e352d626c7565)](https://camo.githubusercontent.com/49c1441e4607accdb38fb505c51c881b13dabea9a2726b234d7ad218befce9fb/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d382e332d2d382e352d626c7565) [![Version](https://camo.githubusercontent.com/6a24c9197bfc07f07d3f136dc182a76b14d3cd2f8d473fbc3729540c9a4c5410/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f76657273696f6e2d302e302e312d6c6967687467726579)](https://camo.githubusercontent.com/6a24c9197bfc07f07d3f136dc182a76b14d3cd2f8d473fbc3729540c9a4c5410/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f76657273696f6e2d302e302e312d6c6967687467726579) Thin Okta provider plugin for the `customer-sso` storefront SSO capability. It ships an Okta `ProviderPreset` (discovery URL, scopes, groups claim, branding) plus Okta org-domain config, and registers it into `customer-sso`'s `PresetRegistry` — all OIDC protocol and storefront logic live upstream. Installing it pulls `customer-sso` and, transitively, `sso-core`. Installation ------------ [](#installation) ``` composer require magedevgroup/module-customer-sso-okta bin/magento module:enable MageDevGroup_SsoCore MageDevGroup_CustomerSso MageDevGroup_CustomerSsoOkta bin/magento setup:upgrade ``` Create the Okta OIDC app ------------------------ [](#create-the-okta-oidc-app) In the Okta Admin Console → **Applications → Create App Integration**: 1. Sign-in method **OIDC - OpenID Connect**, application type **Web Application**. 2. **Sign-in redirect URI** — the `customer-sso` callback: `https:///customersso/sso/callback`. It must match the storefront URL used at runtime exactly. 3. Save, then copy the **Client ID** and **Client secret**. 4. **Groups claim** — for IdP-group → customer-group mapping, add a `groups` claim to the ID token: **Sign On → OpenID Connect ID Token → Groups claim**, filter e.g. `Matches regex .*`. Without this Okta emits no groups and group mapping falls back to the default customer group. Configuration ------------- [](#configuration) Admin → Stores → Configuration → **MageDevGroup → Customer SSO** (store-scoped — tune per store view). **General** (`magedevgroup_customer_sso/general/*`): FieldValueEnable Customer SSOYesIdentity ProviderOktaClient IDfrom the Okta appClient Secretfrom the Okta app**Okta** (`magedevgroup_customer_sso/okta/*`, shown when Okta is selected): FieldValueOrg Domainyour org domain, e.g. `dev-123.okta.com` (scheme optional, `https` assumed)Custom Authorization Serveroptional server id (e.g. `default`); empty = org serverThe discovery URL is derived from these: `https:///.well-known/openid-configuration`, or `https:///oauth2//.well-known/openid-configuration` with a custom authorization server. Account linking by email, keep-password-login, and group → customer-group mapping are configured in `customer-sso`; see that module's README. Design decisions ---------------- [](#design-decisions) **Okta preset: duplicated, not shared.** `admin-sso-okta` ships the first Okta preset; this is the second consumer. The preset is duplicated here rather than extracted into a shared `sso-okta` module because: - The shared surface is small (~40 lines: discovery-URL builder, domain normalization, default scopes, groups claim, button metadata). - The two presets are not literal copies — `admin-sso-okta` reads the `magedevgroup_admin_sso`config section (admin scope), this plugin reads `magedevgroup_customer_sso` (store scope), and each ships its own logo asset. A shared preset would have to parameterize config path + asset id. - Keeps the suite's `-` scheme: adding an IdP is one new plugin, the core is never touched. No extra shared repo to version and release. Extraction stays open if the copies grow or drift (rule of three) — not yet earned at the 2nd consumer. Requirements ------------ [](#requirements) - Magento **2.4.x** - PHP **8.3 – 8.5** Part of the MageDevGroup identity suite --------------------------------------- [](#part-of-the-magedevgroup-identity-suite) RepoRole`sso-core`Shared OIDC engine (installed automatically)`admin-sso` · `admin-sso-`Admin-panel SSO login`customer-sso` · `customer-sso-`Storefront SSO login`admin-scim` · `admin-scim-`Admin-user provisioning (SCIM 2.0)License ------- [](#license) [OSL-3.0](LICENSE) © MageDevGroup. Commercial licensing and support: . ### Health Score 36 — LowBetter than 79% of packages Maintenance90 Actively maintained with recent releases Popularity1 Limited adoption so far Community7 Small or concentrated contributor base Maturity41 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Unknown Total 1 Last Release 49d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/6d5acdc656153eb172422ac03f4a59806116de32da5f861c4b00e4ac7bb9c544?d=identicon)[magedevgroup](/maintainers/magedevgroup) --- Top Contributors [![mageown](https://avatars.githubusercontent.com/u/2058487?v=4)](https://github.com/mageown "mageown (1 commits)") ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/magedevgroup-module-customer-sso-okta/health.svg) ``` [![Health](https://phpackages.com/badges/magedevgroup-module-customer-sso-okta/health.svg)](https://phpackages.com/packages/magedevgroup-module-customer-sso-okta) ``` ### Alternatives [fastly/magento2 Fastly CDN Module for Magento 2.4.x 1564.5M1](/packages/fastly-magento2)[checkoutcom/magento2 Checkout.com Payment Gateway for Magento 2 34280.5k3](/packages/checkoutcom-magento2)[myparcelnl/magento A Magento 2 module that creates MyParcel labels 1861.2k](/packages/myparcelnl-magento)[hryvinskyi/magento2-invisible-captcha Magento 2 multi-provider invisible captcha & bot protection (Google reCAPTCHA v2/v3/Enterprise and Cloudflare Turnstile) for form-level and route-level protection 299.6k](/packages/hryvinskyi-magento2-invisible-captcha)[mage-os/module-automatic-translation Automatic AI content translation for Mage-OS. 3223.7k](/packages/mage-os-module-automatic-translation)[loki/magento2-components Core module for defining Alpine.js components with advanced AJAX features 1015.1k29](/packages/loki-magento2-components) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)