Zartan LOCAL Usage Guide

This document is how to set up and run Zartan in your own local environment, outside of UDP

🚧 WIP: Just placeholder for now and will convert this content into vuepress for readability

Setup Okta Org for each Vertical
How to demo
Troubleshooting: FAQs

Requirements

These items need to be installed in order to properly run Zartan:

Python >= 3.7
Okta Org. You can sign-up for a free "dev edition" here
Terraform = 0.12.x ⚠️ The latest version is 0.13.x but the existing HCL scripts associated with this repo only supports v0.12.x. More details on upgrading the HCL script here and here.
(Optional) git client git client installation instructions

Python

Please refer to your OS specific instructions on installing Python.
- e.g. Mac users can install using homebrew:
```
brew install python
```

ℹ️ Mac users: If you've never run a Python app locally before, your machine is in an unknown state when it comes to Python development. It is a known issue for Python dependencies to have moved, become unlinked or deleted during MacOS upgrades (e.g. an upgrade to Catalina). If you have issues during any of the install steps (below) or when running Zartan locally, try reinstalling Python:

brew reinstall python

Terraform

ℹ️ The HCL script locate in /terraform was authored against Terraform v0.12.x. More details on upgrading the HCL script here and here. In short, you may upgrade HCL script using the following command under v0.13.x, "$ terraform 0.13upgrade", but the associated Zartan HCL scripts may not work under v0.13.x. Be warned! 😄

We've provided terraform files for easy configuration of the Okta Org. Specific verticals' .tf files are located in their respective /terraform/{vertical} folder. If you'd rather configure your Org manually, refer to these steps.

Install Terraform for your OS
e.g. for Mac users, you can use homebrew:

brew install terraform

Verify terraform is installed correctly by going to the command line/shell, and type the command terraform version.

# sample output
$ terraform version
Terraform v0.12.28

Install

Open up a terminal/shell then:

Git clone this repo:

# e.g. using https
git clone https://github.com/udplabs/zartan.git

After cloning, cd into the zartan folder.
Use "virtual env" aka venv to setup a contained environment to run the zartan app without impacting your system's Python environment.
```
python3 -m venv venv
```
Or, just python -m venv venv if you only have python 3.x installed on your system.

(Python allows multiple versions to be installed; For Mac users, most likely you'll have both python 2.7 on your local instance along with python 3.x.)
Activate the venv environment: .
- On Mac/Linux
```
source venv/bin/activate
```
- On Windows:
```
.\venv\Scripts\activate.bat
```
ℹ️ NOTE: You'll notice that venv has "activated" when there is a (venv) in your command prompt:
- Mac/Linux:
```
#zsh
user@macbook zartan % source venv/bin/activate
(venv) user@macbook zartan %
```
- Windows:
```
C:\temp123> .\venv\Scripts\activate.bat
(venv) C:\temp123>
```
As best practice, ALWAYS run inside venv. For more information on why you'd want to do this, read up on venv here.
Install dependencies
```
pip install -r requirements.txt
```
NOTE: You may need to run as pip3 install -r requirements.txt if you have python 2.7 on your local instance along with python 3.x

Configure, initialize and apply Terraform for the vertical you want to use

ℹ️ Zartan is a collection of demos for different verticals. In addition to the .tf files in the /terraform/{vertical} folders, there are also vertical specific READMEs in /docs/{vertical}. For readability, this documentation will perform all following steps as if we're in the travelagency vertical. If you're installing/setting up a different vertical, simply reference the folder and/or file for that vertical.

cd into /terraform/travelagency.
Copy travelagency.tfvars.sample into travelagency.tfvars.

Edit in the variables of the travelagency.tfvars file.

org_name        = "<okta_subdomain, e.g. atko>"
api_token       = "<okta_api_token>"
base_url        = "<the okta domain  e.g. oktapreview.com, okta.com, or okta-emea.com>"

Rename the file localhost.tf.none to localhost.tf.

This .tf file is for adding a CORS trusted origin http://localhost:8666 to the Okta Org. If you already have this trusted origin in your org, skip this step.
Initialize terraform.
```
terraform init
```

Execute the "plan".

terraform plan -var-file travelagency.tfvars

"Apply" the plan.
```
terraform apply -var-file travelagency.tfvars
```
Type 'yes' at the prompt. Once it is completed you should see a message similar to Apply complete! Resources: 6 added, 0 changed, 0 destroyed.
Verify by checking in your Okta Org.

NOTE: The terraform script for travelagency generates: 1. an OIDC Client, 2. an Auth Server, and 3. adds CORS for http://localhost:8666.
Return to the root folder.

Your Org should be setup now so get out of /terraform/travelagency (go back to /zartan or "project root") to complete the rest of the steps.

Local environment variables

NOTE: ℹ️ Optional

If you prefer to use your own SparkPost account the following documentation should help.

Sendgrid is supported as well. See more information on getting started with Sendgrid.

Set up the .env file:

Copy the .env.sample (in the root directory) file into .env (this should also be in the root directory). Look for and edit these values in the file:

Variable	Value
OKTA_CLIENT_ID	Terraform created an OIDC client named `local travelagency Demo (Generated by UDP)`. Provide its `client_id`
OKTA_CLIENT_SECRET	Terraform created an OIDC client named `local travelagency Demo (Generated by UDP)`. Provide its `client_secret`
OKTA_ISSUER	Terraform created an Auth Server named `local travelagency`. Provide its `issuer_uri`
OKTA_ORG_URL	Your org url. e.g. `https://dev-13485.oktapreview.com`
OKTA_OIDC_REDIRECT_URI	Use `http://localhost:8666/authorization-code/callback` as this was set by Terraform.
OKTA_API_TOKEN	Provide an okta SSWS key

| AWS_API_KEY | ℹ️ Mandatory. Get the value from this Box folder (Only accessible to Okta employees) | | SPARKPOST_API_KEY | ℹ️ Mandatory. Get the value from this Box folder (Only accessible to Okta employees) | | SPARKPOST_FROM_DOMAIN | ℹ️ Optional. You can use your own API KEY but SparkPost requires a registered domain. This Environment Variables overrides the default "recintodev.com". | | SENDGRID_API_KEY | ℹ️ Optional. Bring your own Sendgrid account. | | SENDGRID_FROM_DOMAIN | ℹ️ Optional. You can use your own API KEY but Sendgrid requires a registered domain. |

Select which third party email services: AWS Email or SparkPost or Sendgrid to use or bring your own SparkPost or Sendgrid API KEY. More details.

Variable	Value
AWS_API_KEY	ℹ️ Mandatory. Get the value from this Box folder (Only accessible to Okta employees).

-or-

Variable	Value
SPARKPOST_API_KEY	ℹ️ Mandatory. Get the value from this Box folder (Only accessible to Okta employees).
SPARKPOST_FROM_DOMAIN	ℹ️ Optional. You can use your own API KEY but SparkPost requires a registered domain. This Environment Variables overrides the default `"recintodev.com"`.

-or-

Variable	Value
SENDGRID_API_KEY	ℹ️ Mandatory. Your Sendgrid API key
SENDGRID_FROM_DOMAIN	ℹ️ Optional. You can use your own API KEY but Sengrid requires a registered domain.

(Optional) Provide values for the other variables. Refer to this section for details.

Run The App

Remember to "activate" venv. See Install section.
Then, run python

python app.py

NOTE: You may need to run as python3 app.py if you have python 2.7 on your local instance along with python 3.x

Open up a browser and navigate to http://localhost:8666

Setup Okta Org for each Vertical (outside of terraform)

🚧 WIP: Needs further details.

Feature Flags to enable
Attributes to create in UD
SignOn Policy
Authorization Servers
Access Policy
Scope and Claims
Multi-factor
Inline and Event Hooks

How to demo

Navigate to the respective /docs/{vertical} section for vertical specific READMEs.

Additional Env File Configuration Variables

The .env file provides additional configuration depending on the functionality supported by Zartan. Refer to the tables below to decide the proper values based on vertical.

Variables common to all verticals

Okta Setting

Variable	Value	Example
OKTA_CLIENT_ID	{{client_id}}
OKTA_CLIENT_SECRET	{{client_secret}}
OKTA_ISSUER	{{issuer_uri}}	https://ORGNAME.okta.com/oauth2/default
OKTA_ORG_URL	{{org_url}}	https://ORGNAME.okta.com
OKTA_OIDC_REDIRECT_URI	{{redirect_uri}}	http://localhost:8666/authorization-code/callback
OKTA_API_TOKEN	{{ssws token}}

Zartan Setting

Variable	Value	Default/Example
APP_TEMPLATE	Enter the specific value based on the vertical
APP_LOGINMETHOD	The login UX, widget, custom or redirect	Options: `standard-widget`, `passwordless-widget`,`custom-widget`
APP_NAME	some app name prominently displayed
APP_POST_LOGIN_LANDING_URL	local page to redirect to after login	profile
APP_POST_LOGIN_OVERRIDE_LANDING_URL	absolute URL to redirect to after login	https://okta.com
APP_SLOGAN	some slogan
APP_SUBSLOGAN	some subtitle
APP_LOGO	url to some logo
APP_FAVICON	url to some favicon
APP_BANNER_1	url to some banner image
APP_PRIMARY_COLOR	some primary color	#0061f2
APP_SECONDARY_COLOR	some secondary color	#6900c7
APP_SUCCESS_COLOR	some "success" status color	#00ac69
APP_INFO_COLOR	some "info" status color	#00cfd5
APP_WARNING_COLOR	some "warning" status color	#f4a100
APP_DANGER_COLOR	some "error" status color	#e81500

Third Party Service Setting

AWS Email Service

Variable	Value
AWS_API_KEY	ℹ️ Mandatory. Get the value from Box

-or-

SparkPost Email Service

Variable	Value
SPARKPOST_API_KEY	ℹ️ Mandatory. Get the value from Box
SPARKPOST_FROM_DOMAIN	ℹ️ Optional. You can use your own API KEY but SparkPost requires a registered domain. This Environment Variables overrides the default `"recintodev.com"`.

-or-

Sendgrid Email Service

Variable	Value
SENDGRID_API_KEY	ℹ️ Mandatory. Bring your own Sendgrid account
SENDGRID_FROM_DOMAIN	ℹ️ Optional. You can use your own API KEY but Sendgrid requires a registered domain.

Flask Setting

Variable	Value
SECRET_KEY	some random guid
APP_SCHEME	http or https depending if you have an ssl cert

Unused for local installation

NOTE: ℹ️ You can ignore these as they are for UDP and not applicable when running locally

Variable
UDP_CONFIG_URL
UDP_ISSUER
UDP_CLIENT_ID
UDP_CLIENT_SECRET

Vertical specific variables

Config: Admin vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE admin
Config: Credit vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE credit

Add these values to use this vertical

Variable Value

APP_STEPUP_AUTH_CLIENTID client_id of the "Step up" app

APP_STEPUP_AUTH_CLIENTURL
Config: Dealer vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE dealer
Config: Finance vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE finance

Add these values to use this vertical

Variable Value

APP_STEPUP_AUTH_CLIENTID client_id of the "Step up" app

APP_STEPUP_AUTH_CLIENTURL
Config: Healthcare vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE healthcare

Add these values to use this vertical

Variable Value

APP_STEPUP_AUTH_CLIENTID client_id of the "Step up" app

APP_STEPUP_AUTH_CLIENTURL
Config: Hospitality vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE hospitality
Config: Streaming Service vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE streamingservice
Config: Travelagency vertical

Set this value to use this vertical

Variable Value

APP_TEMPLATE travelagency

Troubleshooting: FAQs

Question: The applications broke, submit an issue!

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

README.md

README.md

Zartan LOCAL Usage Guide

Requirements

Python

Terraform

Install

Configure, initialize and apply Terraform for the vertical you want to use

Local environment variables

Run The App

Setup Okta Org for each Vertical (outside of terraform)

How to demo

Additional Env File Configuration Variables

Variables common to all verticals

Okta Setting

Zartan Setting

Third Party Service Setting

AWS Email Service

SparkPost Email Service

Sendgrid Email Service

Flask Setting

Unused for local installation

Vertical specific variables

Troubleshooting: FAQs

Variable	Value
APP_STEPUP_AUTH_CLIENTID	client_id of the "Step up" app
APP_STEPUP_AUTH_CLIENTURL

Files

README.md

Latest commit

History

README.md

File metadata and controls

Zartan LOCAL Usage Guide

Requirements

Python

Terraform

Install

Configure, initialize and apply Terraform for the vertical you want to use

Local environment variables

Run The App

Setup Okta Org for each Vertical (outside of terraform)

How to demo

Additional Env File Configuration Variables

Variables common to all verticals

Okta Setting

Zartan Setting

Third Party Service Setting

AWS Email Service

SparkPost Email Service

Sendgrid Email Service

Flask Setting

Unused for local installation

Vertical specific variables

Troubleshooting: FAQs