Okta
  • 03 May 2023
  • 2 Minutes to read
  • Dark
    Light
  • PDF

Okta

  • Dark
    Light
  • PDF

Article summary

This guide will teach you how to set up the connector between Okta and Clarity Security.

Estimated time to complete: 5 minutes

If you encounter any problems, please contact your support team or support@claritysecurity.io.

Supported Connector Capabilities

Below are capabilities supported by the connector at this time.

Method
Supported
Ability to Act as a Source of Truth
Yes
Provision User
Yes
List Groups, Policies, and Roles
Yes
Add User to Groups, Policies, and Roles
Yes
Remove User from Groups, Policies, and Roles
Yes
Deactivate User
Yes
Delete User
Yes

Before You Begin

To successfully connect Okta and Clarity Security,  you'll need the following pre-requisites before you begin:

  1.  Admin access within your Okta portal.
    •  Note: If you do not have admin access, contact your Okta admin for provisioning.
  2. Admin access within your Clarity Security tenant
    •  Note: If you are a full admin in Clarity Security and get a permission error when trying to add a new application, reach out to support@claritysecurity.io.

How to Setup the Connector

Step 1: Log in to Okta Admin Portal

https://tenant-name.com/app/login 

Each Okta tenant will have its own unique admin URL.  Contact your Okta admin for your specific URL

Step 2: Head to Security > API

From the landing page after login

Okta Landing Page - Security > API

Step 3: Click Create Token

Click the "Create Token" button to generate a new token.

Okta API - Create Token

Step 4: Name your Token

Give your token a descriptive name, such as Clarity Security Connector, then click "Create Token" to finalize the token creation.

Create Token - Name the Token

Step 5: Copy your Token value

Copy the Token value into a secure and retrievable location; this will be needed in a later step.  Okta will not provide this token again, and you need to create a new token if the original value is not saved or lost.

Create Token - Copy the Value

Step 6: Log in to Clarity

Login to your Clarity Security tenant with admin access.

Step 7: Click on Applications > Marketplace

Navigate to the applications section and then click "Marketplace".

Clarity Applications > Marketplace

Step 8: Click Connect

Click Connect on the Okta option from the marketplace to begin configuring your application connector.

Clarity Application Marketplace - Okta Connector Listing

Step 9: Connect App

Complete the App Settings form.  Details for fields common to all applications can be found in the following article: Common App Configuration Steps.

  • api_token: This value is from was generated and saved during Step 5
  • okta_domain: This value was from the Login process in Step 1.  
    • It should look like this: "dev-1234567". "dev-1234567" comes from the beginning of the tenant url used for login.
      •  (https://dev-1234567.okta.com from the above example)

Common App Configuration Steps - Connect App

Step 10: App Settings

Complete the App Settings form.  Details for each field can be found in the following article: Common App Configuration Steps.

Configure App Step 2 - App Settings

Step 11: User Settings

Complete the User Settings form, check the table at the top to see if any features are unsupported.  Details for each field can be found in the following article: Common App Configuration Steps.

Configure App Step 3 - User Settings

Step 12: Validate Your Selections and Save

Save
Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing).  This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes.

Need Help?

If you have any problems, contact your customer success team. You can also get in touch with our general support via email, open a support ticket. Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.



Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.