Building an Identity Platform Using Okta for Healthcare Applications

This talk describes how a digital pharmacy built a standardized identity platform on Okta for its healthcare applications. It covers authorization servers, scopes and claims, application libraries, Terraform provisioning, and security and compliance practices.

Syllabus

Intro
Authentication using PKCE
Authorization based on presence of 'Admins' group
Applications per environment
Application profile over base profile
Entity based scopes and claims
Application level policy and rule
Client-credentials Okta apps
Service Okta app per environment
Application profile attributes for claims
Granular claims per scope
JWKS and custom scopes and claims validation
One B2C app across all B2C platforms
Use of groups for granular customizations
Resource level authorization
Authorization server segregation
React Library: Features
NodeJS Service: Features
Token verification library: Features
Libraries for build and runtime: Benefits
Terraform modules for SPA apps provisioning
Terraform modules for service apps provisioning
Automating deployment using TF output
Email integration with ZenDuty
Cloudwatch alarms integration with ZenDuty
Event Hooks integration with ZenDuty
Directory Integration
Activity log retention and analytics