Okta integration

Okta is supported through the Mach5 connector framework. This page lists every supported operation and where it can be used.

Connection

Integration connection picker

  • Connector kind: okta
  • Configuration: name, base_url, token_secret_ref, optional default_page_size, optional initial_lookback_seconds.

How to use this integration

For Axon concepts, safety classes, idempotency, and outcomes, see Axon workflows.

Axon

Axon is the controlled action path for connector reads, enrichments, and side effects. Use Axon when a workflow needs to call Okta directly, enrich an investigation, or take an approved action. Invoke the connector kind okta with the operation name and JSON input.

connector: okta
operation: validate
input: { ... }

Ingest Pipelines

Use ingest pipelines for operations exposed as sources. These operations can checkpoint and stream records into Mach5-managed data.

source.connector: okta
source.operation: poll_system_log_page
source.config: { ... }

SQL

Use SQL for read operations exposed as table or scalar functions. Query the connector operation with JSON input and join the result with Mach5 data.

SELECT *
FROM connector_table('okta', 'poll_system_log_page', JSON '{}');

Supported operations

OperationWhat it doesAxonIngest PipelinesSQL
validateValidate Okta credentials and base URL.Yes——
poll_system_log_pageFetch a page of Okta System Log events from a caller-owned cursor.YesYesYes
bounded_system_log_rangeFetch Okta System Log events for a bounded time range.Yes—Yes
lookup_userLookup an Okta user by ID or login.Yes—Yes
list_usersList Okta users with bounded pagination.Yes—Yes
org_identityFetch Okta org metadata.Yes—Yes
search_usersSearch Okta users with bounded pagination.Yes—Yes
create_userCreate an Okta user.Yes——
update_userUpdate an Okta user profile/credentials.Yes——
deactivate_userDeactivate an Okta user.Yes——
reactivate_userReactivate an Okta user.Yes——
delete_userDelete an Okta user.Yes——
user_lifecycle_actionRun an Okta user lifecycle action.Yes——
lookup_groupFetch an Okta group.Yes—Yes
list_groupsList Okta groups.Yes—Yes
search_groupsSearch Okta groups.Yes—Yes
create_groupCreate an Okta group.Yes——
update_groupUpdate an Okta group.Yes——
delete_groupDelete an Okta group.Yes——
add_group_memberAdd a user to an Okta group.Yes——
remove_group_memberRemove a user from an Okta group.Yes——
lookup_applicationFetch an Okta application.Yes—Yes
list_applicationsList Okta applications.Yes—Yes
list_application_usersList assigned users for an Okta application.Yes—Yes
assign_application_userAssign a user to an Okta application.Yes——
unassign_application_userUnassign a user from an Okta application.Yes——
assign_application_groupAssign a group to an Okta application.Yes——
unassign_application_groupUnassign a group from an Okta application.Yes——
list_factorsList Okta user factors.Yes—Yes
reset_factorReset an Okta user factor.Yes——
list_authenticatorsList Okta authenticators.Yes—Yes
lookup_deviceFetch an Okta device.Yes—Yes
list_devicesList Okta devices.Yes—Yes
list_user_devicesList devices for an Okta user.Yes—Yes
device_lifecycle_actionRun an Okta device lifecycle action.Yes——
lookup_sessionFetch an Okta session.Yes—Yes
revoke_sessionRevoke an Okta session.Yes——
list_policiesList Okta policies.Yes—Yes
get_policyFetch an Okta policy.Yes—Yes
update_policyUpdate an Okta policy.Yes——
list_zonesList Okta network zones.Yes—Yes
get_zoneFetch an Okta network zone.Yes—Yes
update_zoneUpdate an Okta network zone.Yes——
list_authorization_serversList Okta authorization servers.Yes—Yes
list_oauth_clientsList OAuth/OIDC clients.Yes—Yes
list_scopesList authorization server scopes.Yes—Yes
list_claimsList authorization server claims.Yes—Yes
list_rolesList Okta roles.Yes—Yes
get_roleFetch an Okta role.Yes—Yes
assign_roleAssign an Okta role.Yes——
revoke_roleRevoke an Okta role.Yes——
inventory_exportBounded Okta inventory export helper.Yes—Yes

Analytics Cookies

Help us understand website usage.

Necessary storage remembers your choice. With your consent, Mach5 also uses PostHog analytics to measure website traffic and interactions.

Change this anytime from Cookie Settings in the footer. Privacy Notice.