Okta integration

Okta is supported through the Mach5 connector framework. This page lists every supported operation and where it can be used.

Connection

Integration connection picker

  • Connector kind: okta
  • Configuration: name, base_url, token_secret_ref, optional default_page_size, optional initial_lookback_seconds.

How to use this integration

For Axon concepts, safety classes, idempotency, and outcomes, see Axon workflows.

Axon

Axon is the controlled action path for connector reads, enrichments, and side effects. Use Axon when a workflow needs to call Okta directly, enrich an investigation, or take an approved action. Invoke the connector kind okta with the operation name and JSON input.

connector: okta
operation: validate
input: { ... }

Ingest Pipelines

Use ingest pipelines for operations exposed as sources. These operations can checkpoint and stream records into Mach5-managed data.

source.connector: okta
source.operation: poll_system_log_page
source.config: { ... }

SQL

Use SQL for read operations exposed as table or scalar functions. Query the connector operation with JSON input and join the result with Mach5 data.

SELECT *
FROM connector_table('okta', 'poll_system_log_page', JSON '{}');

Supported operations

OperationWhat it doesAxonIngest PipelinesSQL
validateValidate Okta credentials and base URL.Yes
poll_system_log_pageFetch a page of Okta System Log events from a caller-owned cursor.YesYesYes
bounded_system_log_rangeFetch Okta System Log events for a bounded time range.YesYes
lookup_userLookup an Okta user by ID or login.YesYes
list_usersList Okta users with bounded pagination.YesYes
org_identityFetch Okta org metadata.YesYes
search_usersSearch Okta users with bounded pagination.YesYes
create_userCreate an Okta user.Yes
update_userUpdate an Okta user profile/credentials.Yes
deactivate_userDeactivate an Okta user.Yes
reactivate_userReactivate an Okta user.Yes
delete_userDelete an Okta user.Yes
user_lifecycle_actionRun an Okta user lifecycle action.Yes
lookup_groupFetch an Okta group.YesYes
list_groupsList Okta groups.YesYes
search_groupsSearch Okta groups.YesYes
create_groupCreate an Okta group.Yes
update_groupUpdate an Okta group.Yes
delete_groupDelete an Okta group.Yes
add_group_memberAdd a user to an Okta group.Yes
remove_group_memberRemove a user from an Okta group.Yes
lookup_applicationFetch an Okta application.YesYes
list_applicationsList Okta applications.YesYes
list_application_usersList assigned users for an Okta application.YesYes
assign_application_userAssign a user to an Okta application.Yes
unassign_application_userUnassign a user from an Okta application.Yes
assign_application_groupAssign a group to an Okta application.Yes
unassign_application_groupUnassign a group from an Okta application.Yes
list_factorsList Okta user factors.YesYes
reset_factorReset an Okta user factor.Yes
list_authenticatorsList Okta authenticators.YesYes
lookup_deviceFetch an Okta device.YesYes
list_devicesList Okta devices.YesYes
list_user_devicesList devices for an Okta user.YesYes
device_lifecycle_actionRun an Okta device lifecycle action.Yes
lookup_sessionFetch an Okta session.YesYes
revoke_sessionRevoke an Okta session.Yes
list_policiesList Okta policies.YesYes
get_policyFetch an Okta policy.YesYes
update_policyUpdate an Okta policy.Yes
list_zonesList Okta network zones.YesYes
get_zoneFetch an Okta network zone.YesYes
update_zoneUpdate an Okta network zone.Yes
list_authorization_serversList Okta authorization servers.YesYes
list_oauth_clientsList OAuth/OIDC clients.YesYes
list_scopesList authorization server scopes.YesYes
list_claimsList authorization server claims.YesYes
list_rolesList Okta roles.YesYes
get_roleFetch an Okta role.YesYes
assign_roleAssign an Okta role.Yes
revoke_roleRevoke an Okta role.Yes
inventory_exportBounded Okta inventory export helper.YesYes

Analytics Cookies

Help us understand website usage.

Necessary storage remembers your choice. With your consent, Mach5 also uses PostHog analytics to measure website traffic and interactions.

Change this anytime from Cookie Settings in the footer. Privacy Notice.