如何使用okta idp发起的登录成功登录到应用程序

const express = require('express');
const passport = require('passport');
const SamlStrategy = require('passport-saml').Strategy;

const app = express();

// 配置 passport 使用 SAML 策略
passport.use(new SamlStrategy({
  entryPoint: 'https://your-okta-domain.com/app/your-app-id/sso/saml',
  issuer: 'https://your-okta-domain.com',
  callbackUrl: 'https://your-app-domain.com/auth/saml/callback',
  cert: '-----BEGIN CERTIFICATE-----\nYOUR OKTA CERTIFICATE\n-----END CERTIFICATE-----'
}, (profile, done) => {
  return done(null, profile);
}));

// 初始化 passport
app.use(passport.initialize());
app.use(passport.session());

// SAML 登录路由
app.get('/auth/saml',
  passport.authenticate('saml', { failureRedirect: '/login' }),
  (req, res) => {
    res.redirect('/');
  });

// SAML 回调路由
app.post('/auth/saml/callback',
  passport.authenticate('saml', { failureRedirect: '/login' }),
  (req, res) => {
    res.redirect('/');
  });

app.listen(3000, () => {
  console.log('Server is running on port 3000');
});