Okta OAuth

1. Sign up at Okta Developer.
2. Applications → Applications → Create App Integration. Choose OIDC - OpenID Connect, Web Application, then Next.
3. Set Sign-in redirect URIs to your Casdoor callback URL (e.g. https://door.casdoor.com/callback). In Assignments set Controlled access, then Save.
4. Copy Client ID, Client secret, and Okta domain from the app.

In Casdoor add an OAuth provider, set Type to Okta, and enter Client ID, Client secret, and Domain. Domain must include the auth server path: use https://<okta-domain>/oauth2/default (not just the Okta domain). See Okta authorization servers.