Secure Okta with Mondoo

Mondoo continuously scans your Okta organization for misconfigurations and security issues. Deploy the integration once and assessments stay current as your Okta configuration changes.

Prerequisites

• Editor or Owner access to the Mondoo space
• Access to an Okta organization

Generate an Okta API token

Mondoo needs an Okta API token to call the Okta API. Create one by following Create an API token in the Okta documentation. Copy the token; you need it in the next section.

Add an Okta integration

In the Mondoo App, navigate to the space where you want to add the integration. In the side navigation bar, select Integrations. In the top right, select + INSTALL. On the integrations page, find the integration you want by browsing or searching by name:

1. Under SaaS, select Okta.

   

2. In Choose an integration name, enter a name that identifies the Okta organization.

3. In Enter the Organization domain, enter your Okta domain. To find this value, read Find your Okta domain in the Okta documentation.

   Do not include -admin in the domain. For example, if your Okta URL is dev-22556123-admin.okta.com, enter dev-22556123.okta.com.

4. In Enter the API Token, paste the token you generated.

5. Select START SCANNING.

On the Recommended Policies page, enable the policies you want Mondoo to score this integration against. To learn how policies work, read Manage Policies.

Learn more

• Mondoo Okta Resource Pack Reference