Sample Okta OpenID Connect

authn-openid_connect-policy.yml

- !policy 
  id: conjur/authn-openid_connect/okta
  body:
    - !webservice
        annotations:
          credential/client-id: ops/okta/client-id
          credential/client-secret: ops/okta/client-secret
          credential/organization: ops/okta/org
          credential/url: ops/okta/url

    - !group clients

    # Allow hosts in the `clients` group to be signed 
    - !permit
      role: !group clients
      privilege: [ sign ]
      resource: !webservice