awslabs / awslabs/agentcore-samples

Add comprehensive Okta inbound authentication tutorial for AgentCore Runtime

Open
#390 0 comments 0 reactions 0 assignees View on GitHub
03-AgentCore-identity
Dominant language
Python
Stars
3.4k
Forks
1.3k
Avg merge
1d 22h
Merged PRs (30d)
30

Description

### Overview
Add comprehensive Okta inbound authentication tutorial for AgentCore Runtime

### Current Behavior
Currently, there's no example for Okta OAuth for inbound authentication for agentcore runtime

### Proposed Solution
- Okta IDP configuration
- JWT token validation
- AgentCore Runtime OAuth configuration

### Technical Details

#### Authentication Flow
1. Client requests credentials from Okta IDP
2. Okta returns JWT token
3. Client uses Bearer token for AgentCore Runtime requests
4. Agent validates JWT claims
5. Agent processes authenticated requests

#### Required Components
- Okta OAuth 2.0 configuration
- Custom JWT Authorizer
- Agent authentication handler
- AgentCore Runtime deployment configs

### Implementation Requirements

#### Okta Setup
- Application registration in Okta
- OAuth 2.0 / OIDC configuration
- Custom claims configuration
- Token endpoint setup

Contributor guide

Open the contributing guide

Research direction

No file or test is named. Start by locating existing AgentCore Runtime authentication tutorials and deployment configurations, then compare their structure with the proposed Okta flow. Done means documenting Okta application and OAuth/OIDC setup, JWT validation, the custom authorizer and handler, and Runtime deployment configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication, documentation, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.