search

AzMoo / django-okta-auth

Django Okta Auth is a library that acts as a client for the Okta OpenID Connect provider.
MIT License
30 stars 23 forks source link

Superuser group configuration #7

Closed andrewbelo closed 3 years ago

andrewbelo commented 3 years ago

I am having trouble configuring admin page permissions for users. As I understand it, the SUPERUSER_GROUP is responsible for this functionality. But, after adding groups to the SCOPE, I am receiving an error saying: One or more scopes are not configured for the authorization server resource..

AzMoo commented 3 years ago

This is an error returned by Okta if your application or authorization server is not configured properly.

You probably don't have one of the default scopes enabled. By default you require: "openid profile email offline_access". You can see which scopes are enabled in your authorization server settings in Okta. It's under the API menu heading.

andrewbelo commented 3 years ago

Yes, all of them are enabled. But, when I try to use "groups" scope it returns this error. I am not sure if adding this scope manually is enough. Screenshot from 2021-02-05 10-47-40

AzMoo commented 3 years ago

Can you check out this forum thread and see how you go? https://devforum.okta.com/t/no-groups-scope-in-the-console-for-the-default-authorisation-server/5573

AzMoo commented 3 years ago

I'm closing this due to the lack of response.