SSO discovery - Okta

Before you start

You'll need access to the Okta Admin Console.

Step 1: Get your Okta base URL

1. Sign in to the Okta Admin Console.
2. Click your name in the top-right corner.
3. Copy your organization's URL, shown under your name in the format your-account.okta.com.

Step 2: Create an API token

1. In Okta, go to Security › API.
2. Open the Tokens tab and click Create token.
3. Name the token MineOS Radar, and click Create token.
4. Copy the token's value and keep it somewhere safe. You won't be able to view it again.
5. Check that the token was created with read-only administrator permissions or higher.

A token has the same permissions as the user who creates it. We recommend creating it as a user with the Read-Only Administrator role, to avoid connection issues. If you'd rather grant only the specific scopes MineOS needs, see Okta's guide to creating an API token with custom permissions and the permissions below.

Step 3: Connect in MineOS

1. Sign in to MineOS.
2. In the left navigation, under Data mapping, select Radar.
3. Click Radar Setup.
4. Under Single Sign-On, select Okta.
5. Paste your base URL and API token, and click Test & Save.

A message confirms the connection was successful, and discovery starts.

Permissions

All permissions are read-only. For details, see Okta's API scopes reference.

What happens next

Discovered systems appear in Radar, with the employees who have access to each one. Discovery continues automatically, so new applications appear as they're added to Okta. See Reviewing findings.

Okta sometimes shares only a technical app name, such as custom_integration_2. These appear as unknown findings that you map yourself. See Resolve unknown findings.

Related articles

• Discover your data sources with Radar: all discovery methods and the security FAQ
• Employees discovery: see who uses each system