Okta Authorization Parameters

This section contains information on the attributes that the connector uses to connect to and interact with the application. Each application type requires different information to create and maintain a connection.

Note
Attributes marked with an asterisk (*) are mandatory.

Okta Connection Settings

The host URL of Okta instance

Select the authentication type provided by Okta

  • API Token

  • OAuth 2.0

The maximum size of each dataset when querying large number of objects

Minimum value is 1 and maximum value is 200. Default: 200

Applicable if 'Authentication Type' is selected as 'API Token'

SSWS API token required for Okta authentication

Applicable if 'Authentication Type' is selected as 'OAuth 2.0'

Authorization grant to be used to obtain access token

URL for token generation

For example, https://{yourOktaDomain}/oauth2/v1/token.

Scopes that must be included while creating JWT tokens for operations on the Okta managed source

Multiple scopes must be provided as space-separated values. For example,

okta.users.read okta.users.manage okta.groups.read okta.groups.manage okta.schemas.read okta.roles.read okta.roles.manage okta.factors.read okta.factors.manage okta.apps.read okta.apps.manage okta.logs.read

Contains the algorithm that is used for signing the JWT assertion

For example,

{

"typ": "JWT",

"alg": "RS256"

}

JWT audience for authorization

JWT issuer for authorization

This value must be same as the client_id

JWT subject for authorization

This value must be same as the client_id

Private key text used for encrypting the JWT assertion

Password for decrypting the private key

Aggregation Filter Settings

Optional condition to include a subset of Accounts during aggregation

For example: status eq "ACTIVE"

For more information on the Aggregation Filters supported on the managed system, refer to Supported Aggregation Filters.

Optional condition to include a subset of Groups during aggregation

By default the value is set as follows:

type eq "BUILT_IN" or type eq "OKTA_GROUP"

For more information on the Group Aggregation Filters supported on the managed system, refer to Supported Aggregation Filters.

Optional condition to include a subset of Applications during aggregation

For example: status eq "ACTIVE"