Okta Developer Study Guide

The Authentication API is a ? - Answer- Stateful API that implements a finite state machine with defined states and transitions. - Each initial authentication/recovery request is issued a state token, that must be passed with every subsequent request until transaction is completed The stateToken is? - Answer- Intended to be used between the web application performing end-user authentication and the Okta API. What JSON format does the Authentication API leverage? - Answer- JSON HAL, which is a format to publish "next" and "prev" links Authentication Type - Answer- Represents type of authentication and is available only during the SP-initiated step-up authentication and IDP-initiated step-up authentication SP-initiated step-up authentication is? - Answer- Endpoint is currently supported only for SAML-based apps. Every step-up transaction starts with the user accessing an application. If step-auth is required Okta redirects used to custom sign-in page with stateToken as request parameter - Must first enable custom sign-in page for the application before using the API For SP-initiated step-up authentication there are 2 methods: - Answer- - With session - Without session Public application is? - Answer- A public application is an application that anonymously starts an authentication or recovery transaction without an API token, such as the Okta Sign-In Widget. Trusted application is? - Answer- Trusted applications are backend applications that act as authentication broker or login portal for your Okta organization and may start an authentication or recovery transaction with an administrator API token. Trusted apps may implement their own recovery flows and primary authentication process and may receive additional metadata about the user before primary authentication has successfully completed. Authentication v