Onboarding Okta Identity Provider

Follow the steps below to onboard your environment to our Okta Identity Provider integration. This integration uses the Core Okta API to interact with your Okta organization.

To connect to Okta, we require:

  1. Okta Domain
  2. API Token
1

Determine Your Okta Domain

Your Okta domain (also known as your org URL) is the URL you use to access your Okta organization. It typically looks like: https://{your-tenant}.okta.com. Make note of this URL as you’ll need it later. If you are on the Okta Admin console, the URL will appear as https://{your-tenant}-admin.okta.com. The the URL excluding -admin is your Okta domain.

2

Navigate Okta Admin Console

Login to the Okta Admin Console and navigate to the API Tokens page. (Sidebar: Security -> API -> Tokens)

3

Create API Token

Click on the Create Token button. You will see the following screen.

Add a name for the token(eg. leen-okta-idp), set allowable origin to Any IP and click on the Create Token button.

On the next screen, you will see the secret API token.

Record your API token secret somewhere safe. After the credential window is closed, the secret is no longer visible.

4

Enter Credentials

In the Okta Identity Provider connector in Leen, enter the following information:

  • Okta Domain: Enter your full Okta domain URL (e.g., https://{your-tenant}.okta.com)
  • API Token: Paste the API token you created in the previous step

For more information on Okta API tokens and how to use them, refer to the Okta API documentation.