Okta Integration Module

[#1]

End-to-end identity management and governance to protect all your users, apps, and data with ready integration that enables minimal time to go live and secure enterprise identities.

Support Level: SailPoint Delivered

Connectors developed by SailPoint's Engineering team and supported under annual SailPoint support and maintenance. Reach out to SailPoint support for assistance.

Supported Use Cases

• Full Account Aggregation
• Single Account Aggregation
• Delta Account Aggregation
• Full Entitlement Aggregation
• Full Group Aggregation
• Single Group Aggregation
• Create Account Provisioning
• Update Account Provisioning
• Delete Account Provisioning*
• Create Group Provisioning*
• Update Group Provisioning*
• Delete Group Provisioning*
• Enable / Disable Account Provisioning
• Unlock Account Provisioning
• Change Account Password
• Add Entitlement(s)
• Remove Entitlement(s)
• Discover Schema*
• Pass-through Login (PTA)

*This feature is currently supported only with the IdentityIQ platform

Supported Versions

• Okta

Related Documentation

• IdentityNow (SaaS-SaaS, VA-less Connectivity)
• IdentityNow
• IdentityIQ

Contact Us

SailPoint Support

SailPoint Professional Services

[dk0200]

I tested with the OKTA connector but seems like it only aggregates groups , applications and account objects. Why do we not have the ability to aggregate roles? I would like to be able to provision OKTA roles. Or am I missing something? 

[vfchoo]

Hi, since yesterday (Sep 25 2024), our Okta application (IIQ 8.2) encountered error in the scheduled Aggregration task. We have been this task setup for the last 2 years and there is no issue. This is a standard aggregration task with no rules applied. Also this is a standard Okta application with no rules applied as well.

Error from Syslog from the task:

sailpoint.connector.InvalidConfigurationException: [ InvalidConfigurationException ]
[ Possible suggestions ] Ensure the resource mentioned in the Okta URL is correct. The URL resource is /api/v1/groups/00gmbn4lmEUm6zFNK4x6/users?limit=10000
[ Error details ] Request execution failed. HTTP Error code : 405, Okta Error code : E0000022, errorSummary : The endpoint does not support the provided HTTP method, errorCauses:[].
at sailpoint.connector.OpenConnectorAdapter.throwCounterpartException(OpenConnectorAdapter.java:1763)
at sailpoint.connector.OpenConnectorAdapter.iterateObjects(OpenConnectorAdapter.java:943)

Not sure if there is a change in Okta groups API and if so, will this connector be updated by Sailpoint? Thanks

[pratheepk]

Hi Vfchoo, I got similar error, Can you help me how to solve it if you done that already?

[vfchoo]

Hi @pratheepk, Sailpoint posted this link, https://community.sailpoint.com/t5/IdentityIQ-Blog/Okta-Connector-Updates-Changes-in-the-URL-Encoded...

Need to request efix from customer success contact. 

[pratheepk]

Thanks @vfchoo for your quick response, is that e-fix solved the problem?

[vfchoo]

Yes @pratheepk