[MlMt] Okta support

[Benny Kjær Nielsen]

On 11 Sep 2018, at 17:10, Marco Qualizza wrote:

> I was wondering what the status is for Okta support in MailMate?  Is 
> this something that you are working (or plan on working) on, or is it 
> something that you'd like/need some community support/help getting 
> done?

It's not something I'm working on, but if we can figure out how it's 
supposed to work then I'm willing to look into it. If I understand 
correctly, Okta isn't just Okta. Okta is used together with some 
existing service/company and MailMate would need to be registered with 
each of these services/companies to work with each one. Or more 
specifically, MailMate would need to be registered with a particular 
service/company to work with the use of Okta at that service/company. As 
previously mentioned MailMate is hardcoded to work with Gmail and 
outlook.com for which I've registered MailMate myself. In order to test 
a solution for an Okta-using IMAP/SMTP server I would need MailMate to 
be registered such that it has a `client_id` as described on [this 
page](https://developer.okta.com/authentication-guide/implementing-authentication/auth-code-pkce). 
Given that I could look into how similar the OAuth2-flow is compared to 
Gmail/Outlook (a quick look tells me that some things are different).

If it works then I could then look into making it possible for the user 
to provide the `client_id` (and various settings) instead of having it 
hardcoded into MailMate as done for Gmail/Outlook.

I hope that makes sense :)

-- 
Benny
https://freron.com/become_a_mailmate_patron/

> On 29 Aug 2018, at 9:38, Benny Kjær Nielsen wrote:
>
>> On 24 Aug 2018, at 17:04, Nicholas Vahalik wrote:
>>
>>> I've met the guy that owns the Oauth2 stuff for Okta. He said it 
>>> supports Oauth2 as long as MM supports "by the book" OIDC or Oauth 
>>> support.
>>
>> Well, MailMate has OAuth2 support for Gmail and `outlook.com` 
>> addresses. Part of OAuth2 is that the email client needs to be 
>> registered with the email service used. This is currently hardcoded 
>> into MailMate, but that could be changed. It still requires IMAP 
>> access to be available though.
>>
>> For the record, I believe Okta OAuth2 support for desktop apps is 
>> described 
>> [here](https://developer.okta.com/authentication-guide/implementing-authentication/auth-code-pkce). 
>> Although I haven't checked in detail it's probably close to what I do 
>> for Gmail/Outlook, but I don't think it's exactly the same.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20180912/8ec56c12/attachment.html>