Skip to main content

​
Required Permissions

The API token inherits the permissions of the Okta user who creates it. The token creator must have a role that grants the following OAuth scopes: We recommend creating the API token with a user that has the Read-Only Admin role, which grants all of the above permissions.

​
Onboarding Okta Identity Provider

Follow the steps below to onboard your environment to our Okta Identity Provider integration. This integration uses the Core Okta API to interact with your Okta organization. To connect to Okta, we require:
  1. Okta Domain
  2. API Token
1

Determine Your Okta Domain

Your Okta domain (also known as your org URL) is the URL you use to access your Okta organization. It typically looks like: https://{your-tenant}.okta.com. Make note of this URL as you’ll need it later. If you are on the Okta Admin console, the URL will appear as https://{your-tenant}-admin.okta.com. The the URL excluding -admin is your Okta domain.
2

Navigate Okta Admin Console

Login to the Okta Admin Console and navigate to the API Tokens page. (Sidebar: Security -> API -> Tokens)
3

Create API Token

Click on the Create Token button. You will see the following screen.Add a name for the token(eg. leen-okta-idp), set allowable origin to Any IP and click on the Create Token button.Create API TokenOn the next screen, you will see the secret API token.
Record your API token secret somewhere safe. After the credential window is closed, the secret is no longer visible.
4

Enter Credentials

In the Okta Identity Provider connector in Leen, enter the following information:
  • Okta Domain: Enter your full Okta domain URL (e.g., https://{your-tenant}.okta.com)
  • API Token: Paste the API token you created in the previous step
For more information on Okta API tokens and how to use them, refer to the Okta API documentation.