Skip to content

Okta Onboarding

Prerequisites

  • Administrator permissions on your Okta account.

  • Access to SailPoint Entro’s Management → Accounts & Integrations.

Complete the following:

  1. Open Okta Onboarding Form

    In SailPoint Entro, navigate to Management → Accounts & Integrations → Add New Account (top right) → Okta.

  2. Log in to Okta and Access the Admin Portal

    1. Log in to your Okta account.

    2. Save your domain (e.g. https://<domainName>.okta.com).

    3. Click Admin (top right) to open the Okta Admin portal.

  3. Create a New API Service App

    1. Go to Applications → Applications → Create App Integration. Or navigate directly to: https://<domainName>-admin.okta.com/admin/apps/active

    2. Choose API Services, then click Next.

    3. Name the new app integration (for example: Entro Security Integration) and click Save.

  4. Configure Client Credentials

    1. Under Client Credentials, click Edit.

    2. Select Public key / Private key for Client Authentication.

    3. Click Add key.

    4. Return to SailPoint Entro and copy the Public Key from the onboarding form.

    5. Paste the key into Okta, save, and copy the Client ID for later use.

  5. Adjust App Settings

    1. In General Settings, uncheck: “Require Demonstrating Proof of Possession (DPoP) header in token requests.”

    2. Click Save.

  6. Grant Required API Scopes

    Open the API Scopes tab and grant:

    okta.apps.read
okta.appGrant.read
okta.roles.read
okta.users.read
okta.logs.read
okta.apiTokens.read

  7. Assign Admin Role

    1. Go to Admin Roles → Edit Assignment.

    2. Select Super Administrator and click Save Changes.

    3. Alternatively, create a custom role without certain capabilities to avoid granting Super Administrator (Not advised).

  8. Finalize Onboarding in SailPoint Entro

    Fill in the form fields:

    Field Description
    Okta Nickname Label for this Okta connection
    Okta Domain Your Okta domain (e.g. mycompany.okta.com)
    Client ID From the Okta App Integration
    Worker Group (Connector) Select your SailPoint Entro connector

    Click Create Account to complete onboarding.