[Support Request]: Creating Okta Users #2463

Closed
opened 2026-02-05 04:14:23 +03:00 by OVERLORD · 3 comments
Owner

Originally created by @DarthBeav on GitHub (Oct 28, 2021).

Attempted Debugging

  • I have read the debugging page

Searched GitHub Issues

  • I have searched GitHub for the issue.

Describe the Scenario

I have configured our installation to auth with Okta following the instructions here: https://www.bookstackapp.com/docs/admin/third-party-auth/#okta

The Auth works I'm just trying to figure out the best option for provisioning users. I don't want users to be able to self register but right now I need that ability for an okta user to create a profile. The only way I have found to create an account that works with okta is to have the user click the I don't have an account link on the register page then choose the Sign up with Okta button.

So my two questions
Is there a way to pre-create the users for okta? Currently if I manually create and account that matches a user when they try to login with okta we get the message "This Okta account is not linked to any users. Please attach it in your profiles settings...." I don't see any option to attach or specify an existing account is Okta compatible.
image

If that is not possible is it possible to only allow the Sign up with okta option and not allow a user to create a basic account on the register page? We will have this information allowed to anonymous access and do not want them creating accounts.

Thanks

Exact BookStack Version

v21.08.6

Log Content

No response

PHP Version

No response

Hosting Environment

Linux Vm. I don't have access to the server to verify

Originally created by @DarthBeav on GitHub (Oct 28, 2021). ### Attempted Debugging - [X] I have read the debugging page ### Searched GitHub Issues - [X] I have searched GitHub for the issue. ### Describe the Scenario I have configured our installation to auth with Okta following the instructions here: https://www.bookstackapp.com/docs/admin/third-party-auth/#okta The Auth works I'm just trying to figure out the best option for provisioning users. I don't want users to be able to self register but right now I need that ability for an okta user to create a profile. The only way I have found to create an account that works with okta is to have the user click the I don't have an account link on the register page then choose the Sign up with Okta button. So my two questions Is there a way to pre-create the users for okta? Currently if I manually create and account that matches a user when they try to login with okta we get the message "This Okta account is not linked to any users. Please attach it in your profiles settings...." I don't see any option to attach or specify an existing account is Okta compatible. ![image](https://user-images.githubusercontent.com/93331849/139272687-8da36c6e-c994-4c8b-84bd-1d3541bc1edd.png) If that is not possible is it possible to only allow the Sign up with okta option and not allow a user to create a basic account on the register page? We will have this information allowed to anonymous access and do not want them creating accounts. Thanks ### Exact BookStack Version v21.08.6 ### Log Content _No response_ ### PHP Version _No response_ ### Hosting Environment Linux Vm. I don't have access to the server to verify
OVERLORD added the 🐕 Support label 2026-02-05 04:14:23 +03:00
Author
Owner

@ssddanbrown commented on GitHub (Oct 28, 2021):

Hi @DarthBeav,

It sounds like the OKTA_AUTO_REGISTER=true option may suit your use-case? It's described towards the top of the third-party-auth page here:
https://www.bookstackapp.com/docs/admin/third-party-auth/#automatic-registration

There's no way to pre-create with an OKTA account attached.
If you're looking to only provide OKTA login, as an alternative OIDC authentication has recently been added in the latest release which I have tested with Okta:
https://www.bookstackapp.com/docs/admin/oidc-auth/

Would mean having no other login option other than Okta. Comes with the automatic registration. Will likely have group sync in the future.

@ssddanbrown commented on GitHub (Oct 28, 2021): Hi @DarthBeav, It sounds like the `OKTA_AUTO_REGISTER=true` option may suit your use-case? It's described towards the top of the third-party-auth page here: https://www.bookstackapp.com/docs/admin/third-party-auth/#automatic-registration There's no way to pre-create with an OKTA account attached. If you're looking to **_only_** provide OKTA login, as an alternative OIDC authentication has recently been added in the latest release which I have tested with Okta: https://www.bookstackapp.com/docs/admin/oidc-auth/ Would mean having no other login option other than Okta. Comes with the automatic registration. Will likely have group sync in the future.
Author
Owner

@DarthBeav commented on GitHub (Oct 29, 2021):

Thanks I missed that setting when I was going through the article. Exactly what I needed.

@DarthBeav commented on GitHub (Oct 29, 2021): Thanks I missed that setting when I was going through the article. Exactly what I needed.
Author
Owner

@ssddanbrown commented on GitHub (Oct 29, 2021):

Awesome! Will therefore close this off.

@ssddanbrown commented on GitHub (Oct 29, 2021): Awesome! Will therefore close this off.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#2463