feat(okta): group-to-role mapping, user auto-provisioning and userinfo enrichment#6574

Open

an0nym21 wants to merge 7 commits into

keephq:mainfrom

an0nym21:feat/okta-group-role-mapping

Commits on Jun 22, 2026

feat(okta): add group-to-role mapping via OKTA_*_GROUPS env vars
an0nym21
committed
feat(okta): call userinfo endpoint to fetch groups and name claims
an0nym21
committed
test(okta): add unit tests for group-role mapping, userinfo and provisioning
an0nym21
committed
fix(okta): use ID token to expose app-level group claims to backend
an0nym21
committed
fix(okta): accept client_id as valid audience for ID token verification
an0nym21
committed
fix(okta): restore groups scope to trigger app-level group claim in ID token
an0nym21
committed
chore(okta): downgrade per-request verbose logs to debug level
an0nym21
committed