Okta Integration
Manage identity and access — list users, groups, and apps, get a user, and suspend or activate users (writes require approval).
Capabilities
This integration enables workers to:
- List users
- Get a user
- List groups
- List apps
- Suspend a user (approval-gated)
- Activate a user (approval-gated)
Setup
Follow these steps to connect Okta:
- Create an Okta API token (Security → API → Tokens → Create Token)
- Navigate to Integrations and click 'Add Connection'
- Select Okta and enter your Okta domain and API token (SSWS)
- Assign your IT/access/security workers to use it
Official links
Security
- The API token is encrypted at rest (AES-256-GCM)
- The token inherits the creating admin's permissions — use a least-privilege service account
- Suspending and activating users require human approval
Credential Storage
All integration credentials are encrypted at rest using AES-256-GCM encryption. OAuth tokens are automatically refreshed when needed.
Supported Roles
The following roles can use this integration by default: