---
title: "Okta Integration Guide"
slug: "okta-integration-guide"
updated: 2025-04-11T08:40:52Z
published: 2025-04-11T08:40:52Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safe.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta

## About this document

---

This document provides the step-by-step procedure to configure Okta in SAFE.

## Introduction

---

SAFE integrates with Okta, and fetches the security misconfiguration of the Okta account in SAFE.

## Prerequisites

---

- Access required in **SAFE**:
  - SAFE Admin Access
- Access required in **Okta**:
  - Okta Admin Account
- Required User Inputs:
  - API Instance URL
  - API Token
- Scope:
  - Admin Access

## Generate Connection Details

---

- How to generate **API Token:**
  - Log in to your Okta account as **Admin**.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/1(6).png)
  - From the left navigation, click on **Security** and select **API** from the drop-down menu.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/2(5).png)
  - Click on the **Tokens** tab on the API page.
  - Click on the **Create token** button.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/3(4).png)
  - Enter a name for the token and click on the **Create token** button.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/4(3).png)
  - The system creates and displays the API Token. **Copy** and **save** the API Token to be used while configuring Okta in SAFE.
  - It's important to regularly update the API Token in SAFE according to its expiration date.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/5(4).png)
- How to get **API Instance URL:**
  - Log in to your Okta account as Admin.
  - **Copy** the base URL of your account. **Save** the *API Instance URL*to configure Okta on SAFE.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/6(4).png)

## Configure Okta in SAFE

---

- Log in to your SAFE account as Admin.
- Click on the **Integrations** option from the left navigation.
- Scroll to find the Okta integration card or search for Okta in the search bar.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/7(2).png)
- Enter the following:
  - **API Instance URL**
  - **API Token**
- Enter the **Auto Sync Frequency**.
- Click on the **Test Connection** button.
- Once the connection is successful, click on the **Save** button.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/8(4).png)
- Once the configuration is saved successfully, click on the **Sync** **Now** button to trigger an on-demand sync.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/9(3).png)
- Upon a successful sync, the system pulls the Okta assets and their findings in SAFE. You can track the status of the sync in the **History** table.

## View Results

---

- Go to the integration homepage.
- Scroll to find the Okta integration card or search for Okta in the search bar.
- Click on the Okta integration card for **Finding View** and **Asset View**.
  - **Finding View**: This tab displays all the findings details fetched from Okta.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/10(3).png)
  - **Asset View:**This tab displays all the assets pulled from Okta.

![](https://cdn.document360.io/23dc20b8-a989-48c0-8653-f1d3e4abc734/Images/Documentation/11(2).png)

## History

---

Learn More about Integration History [here](https://docs.safe.security/safe-4/docs/integration-history).

## SAFE's Outgoing IP Addresses

---

Click [here](https://docs.safe.security/safe-4/docs/safes-outgoing-ip-addresses) to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.