How to Configure an Okta Data Source

This article provides detailed steps to set up an Okta data source for discovery.

Prerequisites

Okta credentials are required to configure an Okta Data Source. The following guides you through the necessary steps.

Note: The token will have the same permissions as the user that created it. To enable Hydden to see all the account data correctly, we suggest that a ‘Super Admin’ creates the token.

1. To configure an API Token in Okta, navigate to https://[your okta tenant name].okta.com/admin/access/api/tokens. Alternatively, login to your Okta tenant with admin credentials, and browse using the left-hand menu to SECURITY | API. Change the API page view to TOKENS.

2. On the TOKENS view page, press the Create Token button.

3. On the token creation page, enter a name for the token that Hydden will use to perform its collections.

4. To complete the token creation workflow, press the CREATE TOKEN button.

5. Copy and save the Token Value, which looks something like the following: 00AReXGuJKL9r-i3HbvUj9piQc-Quc49XMZ9VYgfrf

   Note, that you will not be able to view this value again after leaving the page. This value is needed on the Data Source creation page.

6. Make note of the Token ID, which will look something like the following: 00D234plopklal8DS5k9.

   This will be the Client ID on the Data Source Credentials configuration page.

Configure Your Hydden Okta Data Source

1. Login to your Hydden tenant.
2. To access the data sources page, navigate to Configuration > Discover and select Data Sources or use the data source URL: https://portal.hydden.com/configuration/datasource.
3. To add the Okta data source, click + Add Data Source.
4. From the drop-down, choose Okta.
5. For Name enter an easy-to-identify name for the data source.
6. For tenant ID, enter your Okta tenant name, i.e. bus-33563577.okta.com.
7. You may ignore Preset and Schedule for now.
8. To the right of Credentials, click +.
   1. The Add credential modal opens and the drop-down selection should show Cloud credential. If not, change it to Cloud credential.
   2. Enter a name for your Okta credential.
   3. Enter the client ID and Secret from your Okta API Token as previously saved/vaulted.
   4. Click Add.
9. On the Add Data Source modal, click Add to save the newly created data source.

At this point, you can run a collection from the Data Sources page and shortly after, you will see your Okta users listed on the Identity Posture dashboard, in Global Search and the Search Library.