Skip to content

Okta

The Okta Integration enables SailPoint Entro to continuously monitor and discover non-human identities, application secrets, and employee directory data across your Okta organization. Once connected, SailPoint Entro maps Okta applications, client credentials, role assignments, and audit logs into a unified NHI inventory.

Architecture

+-----------------------+           +-----------------------+
|   SailPoint Entro     |           |      Okta Cloud       |
|   (Control Plane)     | <-------> |   (API + Directory)   |
+-----------------------+   HTTPS   +-----------------------+
                          (TLS 1.2+)

Integration Highlights

  • Discover Okta applications and their client credentials
  • Map API grant permissions per application for NHI visibility
  • Enumerate directory users and employee profiles for ownership attribution
  • Collect Okta audit logs for continuous monitoring and anomaly detection
  • Read role assignments across users and applications

Prerequisites

  • Administrator access to your Okta organization
  • Ability to create an API Service App in the Okta Admin Console
  • Access to grant API scopes and assign admin roles in Okta

Security and Compliance

  • SailPoint Entro authenticates via an API Service App using a Client ID and Public Key pair - no passwords or long-lived tokens are stored.
  • All operations are read-only - SailPoint Entro never modifies or deletes data in Okta.
  • API credentials are AES-256 encrypted at rest within SailPoint Entro.
  • All communication is over HTTPS / TLS 1.2+.
  • SailPoint Entro is SOC 2 Type II certified, ISO 27001 and GDPR compliant.