OKTA is not able to verify APPIAN using event Hooks.

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 18:18:59 GMT

AFAIK there is no detailed logging in Appian by default. If required, you can open a support case and ask for assistance from the cloud team.

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 17:32:14 GMT

Above screen is Okta where i am passing Option 1 which working. But since i don't know what request i am getting can't filter the verification values

Appian-API-Key Header:
curl example.appian.com/.../endpoint -H "Appian-API-Key: ${API_KEY}"
is there any way to log the Get request in APPIAN ??

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 17:27:40 GMT

I know. Appian is very specific about this. When you use the header "Authorization", you must adhere to this

Appian-API-Key Header:
curl example.appian.com/.../endpoint -H "Appian-API-Key: ${API_KEY}"
Bearer Token Header:
curl example.appian.com/.../endpoint -H "Authorization: Bearer ${API_KEY}"
Basic Authentication Header (with null username):
curl -u :${API_KEY} example.appian.com/.../endpoint

Basic Authentication Header (with null password):
curl -u ${API_KEY}: example.appian.com/.../endpoint

I mean the colon before or after the key.

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 17:27:31 GMT

Is there any way to log request in appian ?

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 17:15:45 GMT

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 17:11:05 GMT

Can you change the header name for authentication, OKTA is using to "Appian-API-Key"?

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 17:05:14 GMT

Okay This i was testing as i have not checked the box .. so it inot giving the value

But ideally Scenario

In get call OKTA is going to send the x-okta-verification-challenge :<>

Which needs to be send in the request Body of the Get call .{as per the okta document https://developer.okta.com/docs/concepts/event-hooks/#one-time-verification-request }

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 17:02:04 GMT

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 16:43:40 GMT

From OKTA request it will be sending the verification code. So for testing i was checking the value and it is working as per the requirement. But not from OKTA .

Is that answered your question.

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 16:20:26 GMT

What I mean is that in your Postman screenshot, the GET does not show the validation value in the returned body.

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 16:18:53 GMT

Yes OKTA and APPIAN not able verify each other .. even I am trying as per the document.

Any suggestion can help. Any alternative to get the logs may help.

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 16:15:44 GMT

OK. That GET does not return the verification value.

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 15:29:26 GMT

Yes Both are listening to same endpoint and security we are using API Key .

Also we have verified everything from SoapUI and Postman.

Get

Post

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 15:25:19 GMT

Are both APIs (POST/GET) listening on the same endpoint? How is the security setup? Did you test using Postman?

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 15:21:51 GMT

Yes I Have ,

One is Get Method

There is another API POST method

AS Per Okta Documentation

Since not able to debug , as not able to see the request/response from both end products ..facing challenge .

becasue OKTA is just saying verification value from response is not correct.

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 15:13:56 GMT

Did you create an extra API according to the OKTA documentation? I do not have any experience with OKTA, but the documentation seems pretty good.

RE: OKTA is not able to verify APPIAN using event Hooks.

viveks0005 — Mon, 30 Aug 2021 15:09:04 GMT

@stefan Helzle We verified the logs but can't see the request /response ,neither able to print the logs. 😞

RE: OKTA is not able to verify APPIAN using event Hooks.

Stefan Helzle — Mon, 30 Aug 2021 13:25:25 GMT

Did you check the logfile tomcat-access?