# Discovering Applications with Okta SSO

The SailPoint Okta SSO Discovery Connector retrieves detailed information about applications configured within Okta. This connector enables continuous application discovery, providing visibility into application inventory, ownership, and usage across the enterprise. These insights help organizations prioritize and focus their governance efforts on the highest-impact applications. For guidance on creating an Okta SSO Discovery Connector, refer to [Base Configuration](<https://documentation.sailpoint.com/connectors/discovery/sso/okta_sso/help/connecting.html#base-configuration>).

## Supported Features

The Okta SSO connector supports the following features:

- Test Connection
- Discover Application

## Prerequisites

### For API Token Authentication

An administrative user must be granted an Okta API token to authenticate.

> [!NOTE]
>
> Okta API tokens generated from these steps are valid for 30 days and automatically refresh with each API call. Tokens that are not used for 30 days will expire.

To generate an Okta API token:

1. Go to [Create an API token](<https://developer.okta.com/docs/api/getting_started/getting_a_token.html>) in the Okta Developer documentation.
2. Sign in to your Okta organization as a user with super administrator privileges. API tokens have the same permissions as the user who creates them. If the user permissions change, the API token permissions also change.
3. On the Developer Console, select **Tokens** from the API menu.
4. On the administrator's UI (Classic UI), go to **Security \> API \> Tokens**.
5. Select **Create Token** and provide a name for the token.
6. Note the API token for future references.

### For OAuth 2.0 Authentication

To use Okta OAuth 2.0 authentication:

1. Create a service application in Okta.

   > **Note**
   >
   > For information on creating a service application on Okta, refer to [Implement OAuth for Okta with a service app](<https://developer.okta.com/docs/guides/implement-oauth-for-okta-serviceapp/overview/>) in the Okta Developer documentation.
2. Grant the required OAuth scopes to the service application.
3. Configure the Okta source as per the detail of service application.

   > **Note**
   >
   > Refer to [Authenticate with OAuth 2.0](<https://documentation.sailpoint.com/connectors/discovery/sso/okta_sso/help/connecting.html#authenticate-with-oauth-20>) for OAuth 2.0 configuration.

## Required Permissions

Okta provides different levels of permission. Review the permission model below and create your account accordingly. Generate the Okta API token with this account that can be used for authentication.

For example, you can create an account with Super Admin/Org Admin/Group Admin permissions.