Hi everyone! I’m pretty new to the whole OpenClaw ecosystem, but we’re piloting it for our Sales Ops team. I normally live in Salesforce reports and dashboards, so this is a bit of a leap for me.
Our company uses Okta for basically everything as our identity provider. I’ve been tasked with setting up OpenClaw to connect through Okta for authentication, instead of using its built-in login. The official docs have a section on external auth, but it’s pretty high-level and seems geared toward generic OIDC.
I’m hitting a wall with the specific configuration parameters. For example:
* What exact redirect URI format does OpenClaw need me to register in Okta?
* Should I be mapping Okta groups to OpenClaw roles, and if so, what’s the best claim name to use?
* I saw a field for “scopes” in the OpenClaw config file—are “openid profile email” usually enough?
If anyone has gone through this setup before, I’d be so grateful for any concrete tips or even snippets from your config file (with any sensitive bits removed, of course!). I’m especially curious about what “non-standard” quirks you ran into with Okta specifically, and how you resolved them.
Thanks!