Okta OAuth 2.0 Client Credentials with Host

Description

General

• Documentation: https://developer.okta.com/docs/guides/implement-oauth-for-okta/main/
• Summary: Okta is an identity and access management company, it provides cloud solutions that help companies manage and secure user authentication. Applications that use Okta for authentication can be set and associated to a user account, they are attributed a client_id and a client_secret to authenticate communications between the applications and Okta. This detector catches credentials and host name of the OAuth 2.0 server, so that the credentials can be checked.

Revoke the secret

A new client secret can be generated from the Application/General tab of the dashboard. This automatically revokes the previous client secret.

Details for Okta OAuth 2.0 Client Credentials with Host

• Family: credentials

• Category: identity_provider

• Company: Okta

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 3

• Occurrences found for one million commits: 3.65

• Prefixed: False