Skip to content

Discovering Applications with Okta SSO

The SailPoint Okta SSO Discovery Connector retrieves detailed information about applications configured within Okta. This connector enables continuous application discovery, providing visibility into application inventory, ownership, and usage across the enterprise. These insights help organizations prioritize and focus their governance efforts on the highest-impact applications. For guidance on creating an Okta SSO Discovery Connector, refer to Base Configuration.

Supported Features

The Okta SSO connector supports the following features:

  • Test Connection
  • Discover Application

Prerequisites

For API Token Authentication

An administrative user must be granted an Okta API token to authenticate.

Note

Okta API tokens generated from these steps are valid for 30 days and automatically refresh with each API call. Tokens that are not used for 30 days will expire.

To generate an Okta API token:

  1. Go to Create an API token in the Okta Developer documentation.
  2. Sign in to your Okta organization as a user with super administrator privileges. API tokens have the same permissions as the user who creates them. If the user permissions change, the API token permissions also change.
  3. On the Developer Console, select Tokens from the API menu.
  4. On the administrator's UI (Classic UI), go to Security > API > Tokens.
  5. Select Create Token and provide a name for the token.
  6. Note the API token for future references.

For OAuth 2.0 Authentication

To use Okta OAuth 2.0 authentication:

  1. Create a service application in Okta.

    Note

    For information on creating a service application on Okta, refer to Implement OAuth for Okta with a service app in the Okta Developer documentation.

  2. Grant the required OAuth scopes to the service application.

  3. Configure the Okta source as per the detail of service application.

    Note

    Refer to Authenticate with OAuth 2.0 for OAuth 2.0 configuration.

Required Permissions

Okta provides different levels of permission. Review the permission model below and create your account accordingly. Generate the Okta API token with this account that can be used for authentication.

For example, you can create an account with Super Admin/Org Admin/Group Admin permissions.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.