SaaS Management: Okta Connector

JumpCloud® SaaS Management gives you visibility and control over shadow IT and SaaS app use within your org. Connectors detect shadow IT without adoption of a browser extension and provide a significant increase to the valuable usage and security insights.

The Okta connector retrieves users lists and data from the Okta API.  It captures new users and login events via periodic polling for real-time updates. This connector also ensures data integrity and security because it is configured via OAuth with read-only permissions.

Prerequisites

• To configure the connector, you must have access to Okta Admin Console.

Considerations

• Based on your organization’s size, the initial collection of data may take some time, up to an hour. 

Configuring Okta

1. In the Okta Admin Console, go to Security > API > Tokens.
2. Click Create token.
   1. Enter a name for the token. 
   2. Under API calls made with this token must originate from, select Any IP.
3. Click Create token. Copy the generated token.
   

Configuring JumpCloud

1. Log in to the JumpCloud Admin Portal.
2. Go to SECURITY MANAGEMENT > SaaS Management.
3. In SaaS Management settings, go to the Connector tab and select + Add Connector.
   

4. Select Okta and click Connect. 
5. Enter a name and click Connect.
6. Enter the token copied from the previous section step 3. 
7. In the Okta Subdomain field, enter your subdomain.
8. Click Save Connector.
9. You will now see Okta in your list of Connectors.

Required Permissions

• Permission List
• Permission Scope

Uninstall/Remove

• On the Connector’s detail page, click on Delete Connector and follow the prompts.

• To revoke permissions granted to JumpCloud, go to the Okta Admin Console > Security > API > Tokens and revoke the generated token.