Validate Okta token bitbucket api

[Anita Y]

Hi ,

As per our requirement , We are using Okta for second factor authentication and want to validate the token generated by Okta for Bitbucket API . Any help how it can be done ?

[Stephen Sifers]

Hello Antia,

Using MFA with any application is always a great idea. I do want to understand a bit more about your question to ensure I provide a proper answer. What exactly do you mean by Validate the token for the API? Can you please elaborate a bit further?

We look forward to your response.

Regards,
Stephen Sifers

[Anita Y]

@Stephen Sifers

   We are using Okta for Authentication and one of our 

customers use machine learning jupyther notebook ,
so they have to go through Okta for authentication ,
so they are giving Okta token as a bearer token to authenticate and BB is unable to validate that token
and we are getting a 401 error . Can BB be able to authenticate the Okta bearer token , if so how it can be done?

[Stephen Sifers]

Hello Anita,

Thanks for responding and providing further clarification.

Your Okta authentication will be used for accessing the Bitbucket application via the web interface. When accessing Bitbucket via the API you need to use a token as your request will not be processed through MFA. With Bitbucket server, they will need to generate an API personal access token and then use that token for authentication moving forward. More about this may be found at Personal access tokens.

If this doesn’t apply or your have Okta configured for requiring MFA for API calls, please let me know.

Regards,
Stephen Sifers

[monkarena]

Hello Stephen,

We are  looking for App to App integration with Bitbucket for checkout and checkin. As mentioned in above post we have an Okta authenticated app and would like to leverage the same Okta token to checkout and checking user source code into bitbucket. Based on your above comment it seems we do not have any capability to authenticate on API side using Okta token.

If you have any options to either validate Okta token in API interface or provide  a feature  to  generate personal  token without login to the Bitbucket application, do let us know.

Regards,

Pratap

[Anita Y]

@Stephen Sifers

We are  looking for App to App integration with Bitbucket for checkout and checkin. As mentioned in above post we have an Okta authenticated app and would like to leverage the same Okta token to checkout and checking user source code into bitbucket. Based on your above comment it seems we do not have any capability to authenticate on API side using Okta token.

If you have any options to either validate Okta token in API interface or provide  a feature  to  generate personal  token without login to the Bitbucket application, do let us know.

Pratap