How to Add Authentication to .NET MAUI Apps

Summary

This tutorial shows how to add Okta-based authentication to a .NET MAUI application, covering project setup, OpenID Connect configuration, sign-in, sign-out, and platform integration. It uses IdentityModel.OidcClient, an OktaClient wrapper, an OktaClientConfiguration class, and a WebBrowserAuthenticator implementation to connect the application to Okta’s browser-based authorization flow. The walkthrough creates a native OIDC client with the Okta CLI, registers redirect and logout URIs using myapp://callback, configures dependency injection, and updates the UI to display claims after login. For Android, it adds a WebAuthenticationCallbackActivity with an intent filter for the myapp scheme and enables Custom Tabs visibility in AndroidManifest.xml. The post includes troubleshooting for NuGet configuration and runtime-pack errors, but notes that the Okta CLI was deprecated and the original instructions no longer work exactly as written after the May 2025 plan change.

Takeaways

1. 1

   IdentityModel.OidcClient handles the OIDC login and logout flows, while OktaClient exposes LoginAsync and LogoutAsync methods around that dependency.

2. 2

   The sample uses myapp://callback for both the redirect URI and logout redirect URI, and the Android callback activity registers myapp as an intent-filter scheme.

3. 3

   The original Okta CLI instructions are preserved for reference but no longer work exactly as written after the May 2025 plan change; manual Okta configuration is required.

FAQ