Okta

Pull users, groups and group memberships from your Okta org.

Source connector

Source connector — pulls identity and access data from Okta into ComplianceScout where it is scored against your compliance frameworks and violation rules.

What ComplianceScout collects

After a successful sync, the following data is available in your ComplianceScout dashboard for violation detection and reporting.

  • All active, suspended, and deprovisioned user accounts with profile data (email, name, status, department, title)
  • MFA enrollment per user — type (TOTP, push, SMS, hardware key) and enrollment status
  • Group memberships and group metadata including group type and description
  • Application assignments — which Okta apps each user can access
  • Admin role assignments (Super Admin, Org Admin, Group Admin, etc.)
  • Audit event log for recent authentication and admin actions

Required credentials

These fields are collected when you add the connector in the ComplianceScout dashboard. Secrets are encrypted at rest using AES-256-GCM and are never logged.

FieldTypeRequiredNotes
Org subdomainTextRequiredThe part before the domain — e.g. "acme" for acme.okta.com
DomainSelectRequiredOptions: okta.com · okta-gov.com · okta.mil
API tokenSecretRequiredCreate a read-only API token under Security → API in the Okta Admin Console.

How to set up this connector

Follow these steps to gather the credentials above and connect Okta to ComplianceScout.

  1. Log in to your Okta Admin Console and navigate to Security → API in the left sidebar.

  2. Click Tokens → Create Token. Name it "ComplianceScout" and copy the token value immediately — it is shown only once.

  3. In ComplianceScout, go to Data & Secrets → Integrations → Add Connector → Okta, enter your org subdomain (e.g. "acme"), select your domain suffix (okta.com, okta-gov.com, or okta.mil), and paste the API token.

  4. Click Test Connection to verify, then Save.

Ready to connect Okta?

Start a free trial — your tenant is provisioned instantly and you can wire up this integration from the connectors page.