Select Actions to adjust the guide

Some actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.

Action

Scope(s)

Loading actions...

Dynamic Guide URL

Scopes Selected


          
            Separator

Getting Your Okta Credentials

To configure the Okta connector profile, you'll need your Okta domain and OAuth application credentials. These are set once at the profile level — end users will not be asked for them.

Your Okta domain can be found in the URL when logged in to Okta.

Given the URL `https://your-org.okta.com/app/UserHome`, your domain is `your-org.okta.com`
For preview environments, the domain may be `your-org.oktapreview.com`

From your Okta homepage, click the Admin button in the top right corner.

Create an OAuth application to obtain your Client ID and Client Secret.

In the Admin Console, navigate to Applications > Applications
Click Create App Integration
Select OIDC - OpenID Connect as the Sign-in method
Select Web Application as the Application type
Click Next

Configure your OAuth application with the appropriate settings.

Enter an App integration name (e.g., StackOne Integration)
Check `Authorization Code` and `Refresh Token` both under the Grant type
Set the Sign-in redirect URI to the callback URL provided by StackOne: `https://api.stackone.com/connect/oauth2/okta/callback`
Under Assignments, assign every user who should be able to connect their account
Click Save

After saving, copy your OAuth credentials.

Client ID is displayed on the application's General tab
Client Secret is also on the General tab (click the eye icon to reveal)
Store these credentials securely as you'll need them for the connector profile

Enables actions: Activate Device, Add User To Group, Create Group, Create Realm, Create User, Create User Type, Deactivate Device, Delete Device, Delete Group, Delete Realm, Delete User, Delete User Type, Get Device, Get Group, Get Realm, Get User, Get User Info, Get User Type, List Devices, List Group Members, List Groups, List Realms, List User Blocks, List User Types, List Users, Remove User From Group, Replace User, Replace User Type, Update Group, Update Realm, Update User, Update User Type

Navigate to the Okta API Scopes tab.
Grant the required OAuth scopes for this integration.
See Okta OAuth 2.0 Scopes for details.
Also include the `offline_access` and `openid` scopes in the list of scopes configured on the connector profile.

Realm Access Configuration

Required for: Create Realm, Delete Realm, Get Realm, List Realms, Update Realm

Realm scopes require an Okta Identity Governance, Secure Partner Access, or Advanced Directory Management subscription.

If your subscription does not include realm management, the API will return authorization errors.

Navigate to Settings > Account in the Admin Console to verify your subscription tier

## Creating the StackOne Connector Profile To create the Connector Profile in StackOne for Okta: Login to StackOne and navigate to [Connector Profiles](https://app.stackone.com/connector_profiles)

Click + Connector Profile
Search for and select Okta
Select Type as OAuth 2.0 (Managed App)
Fill out the fields using details retrieved from your provider:
- Okta Domain
- Client ID
- Client Secret
- Scopes (Optional)
(Optional) Select Actions to be enabled for this Connector Profile
Click Create profile

Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for Okta.