Skip to main content
Okta securely connects people to their applications from any device, anywhere, anytime. Okta integrates with existing directories, identity systems, and thousands of on-premises, cloud, and mobile applications. It runs on a secure, reliable, and extensively audited cloud-based platform.

​
Create Okta API Token

  • Login into the Okta Admin Console.
  • Enter your admin username and password, then click Sign In.
Create the API token using an administrator account with permissions for the AirMDR skills you intend to use. Okta API tokens inherit the permissions of the administrator who creates them; permission to create a token does not automatically provide access to remediation actions.For the suspend-user and Unsuspend user in okta skills, use a token created by a Super Admin or Org Admin. For Add IP To Okta Blocklist Zone and Remove IP From Okta Blocklist Zone, use a token created by a Super Admin, as specified for these AirMDR skills.A token created by a Read Only Admin cannot perform these remediation actions. A Group Admin token does not provide the network-zone management permissions required for the blocklist skills.The list of RBACs (Role-Based Access Control) to create Okta API tokens are as follows:
  • Super Admins
  • Org Admins
  • Group Admins
  • Group Membership Admins
  • Read Only Admins
  • In the Okta Admin Console, click on Security in the top navigation bar.
  • From the dropdown, select API.
  • Under the API section, click on the Tokens tab.
  • Click the Create Token button.
Okta 2 Pn
  • In the Create Token dialog box, enter a Token Name (e.g., “Companyname Okta API Token”).
  • Click Create Token to generate the new token.
After creation, Okta will display the new API token.
This is the only time the token will be visible, so copy and store it securely (e.g., in a password manager).
  • Click Done to finish the process.
Now that you have your API token, you can use it to authenticate API requests.
Email the API token and the Okta Base URL to AirMDR.

​
Optional: Revoke an API Token

If you need to revoke the token at any time:
  • Go back to the API Tokens page in the Okta Admin Console.
  • Find the token you want to revoke and click on the Revoke button next to it.

​
Skills Provided by this Integration

To view the details of Input Parameters and Output for the respective skills
  • Go to AirMDR → Okta Integration page.
  • Select the Skills tab and click on the required listed skills.

​
Configure Okta in the AirMDR Integrations Dashboard

  1. Navigate to AirMDR, provide the credentials, and click Login
  2. Navigate to the AirMDR Integrations Dashboard in the left navigation pane and select Integrations.
  3. Use the search option, enter the keyword “Okta”, select the Connections tab, and click Add New Connection.
  4. Enter an unique name to the Instance (e.g., your org name-Okta) to easily identify the user connection by AirMDR and brief Description to showcase the purpose.
  5. Enter the generated API Key and Base Domain in the Authentication Details field params, and click Save. Okta 5 Pn