Okta2Anything is a simple LDAP Proxy which allows someone to have the Okta IDAAS Service authenticate against almost anything.
This code is based on the great work by: https://github.com/vjeantet/ldapserver
Although it is not uncommon for companies to use LDAP Proxies for authentication, this code is developed for Pilots, Proof of Concepts, and testing. Anyone using this code for production is doing so at thier own risk
Would you be interested in a Commercially available product that can offer LTS (Long Term Support) ?
As much as I enjoyed developing this program, it has become more popular that I would have imagined, and many folks have me for an alternative with support I just don't have the time to keep up with this project.
Beyond ID provides a product with the same capability and can provide Support and Services to run this in production. The link below with provide you with all of the details.
https://www.beyondid.com/solutions/application-integration-gateway/
Okta2Anything acts like an LDAP Service. Using the Okta LDAP Agent, and pointing the LDAP Agent to Okta2Anything. Okta2Antyhing will delete the authentication to a local node.js script that will perform the Authentication
An Okta LDAP Agent is required, and node.js and any required artifacts needed for your authentication scripts to run need to be installed.
Here is a Direct Link to the Okta LDAP Agent:
- Linux Agent (RPM) https://companyx-admin.okta.com/static/ldap-agent/OktaLDAPAgent-05.03.12.x86_64.rpm
- Windows Agent (exe) https://companyx-admin.okta.com/static/ldap-agent/OktaLDAPAgent-05.03.12_x64.exe
Node.js is required, Node is basically be using as a Shell Script.
Downlaod Node.js https://nodejs.org/en/
You will need to download the binary for the Operating System you are running on
| OS | Download Link |
|---|---|
 |
Linux |
 |
MacOS |
 |
Windows |
Follow Okta's guides for configuring LDAP, an example of the settings for the LDAP Agent that are compatible for Okta2Anything are available here.
- Select OpenDJ Directory from the LDAP Directory drop-down
- Set User Search Base to:
ou=People,dc=example,dc=com - Set Passwore Attribute to:
userpassword - Set Group Search Base to:
ou=groups,dc=example,dc=com - Set Group Object Class to:
groupofnames - Set Group Object Filter to:
(objectclass=groupofnames) - Set Member Attribute to:
member - Under Validate Configuration Select Email
Test the settings, use username of test@example.com
Running Examples:
Okta2anything defaults to Port 389
On Many Systems, you Must run that as root. sudo ./okta2anything ...
Command line Switches:
| switch | Description |
|---|---|
| -w | Set Password for cn=Directory manager (If not specified, anything is accepted) |
| -plugin | Specify Plugin used for Authentication (node.js Script) |
Running in Promiscuous mode for testing, all users are accepted
./okta2anything -plugin=promiscuous
Running with Directory Manager password set to Password1, and Authenticate against another Okta Tenant
./okta2anything -w Password1 -plugin=okta2okta