Overview:
This guide provides a step-by-step process of integrating Okta with Axiom Security.
Prerequisites:
In order to complete this integration you will need the following:
Axiom Tenant admin access
Okta Organization URL
Okta API token
Quick Summary:
Configure the Appropriate Administrator Role
Create Okta API Token
Onboard the obtained details in Axiom Web Application
Configure the Appropriate Administrative Role
Full Functionality API Token
This token provides comprehensive access to all Okta resources, enabling users to manage Users, Groups, Applications, and Role Assignments.
Required Permissions:
Users Management:
okta.users.manageGroups Management:
okta.groups.manageApplications Management:
okta.apps.manageRole Assignments:
okta.roles.manage
Creation Guide:
Log in to Okta Admin Dashboard using a Super Administrator user.
Move on to the "Create an API Token with Okta" section.
Limited Functionality API Tokens (Read-Only)
This token provides restricted read-only access, limited to viewing Users, Groups, Applications, and Role Assignments.
Required Permissions:
Users Read-Only:
okta.users.readGroups Read-Only:
okta.groups.readApplications Read-Only:
okta.apps.readRole Assignments Read-Only:
okta.roles.read
Creation Guide:
Full Functionality:
Log in to Okta Admin Dashboard using a Super Administrator user.
Read-Only:
Log in to Okta Admin Dashboard using a Super Administrator user or a user with permissions to manage roles and API tokens.
Navigate to Security → Administrators to manage administrator roles.
Assign a Role to a User:
Click on “Add Administrator” to assign a role to a user who will be creating the API token.
Search and select the user.
Create a custom admin role with specific permissions by clicking on “Add Role” and then “Create New Role.” Name the role and select permissions:
User Management: For full support:
okta.users.manage; for read-only:okta.users.readGroup Management: For full support:
okta.groups.manage; for read-only:okta.groups.readApplication Management: For full support:
okta.apps.manage; for read-only:okta.apps.readRole Assignments: For full support:
okta.roles.manage; for read-only:okta.roles.read
Save the role and assign it to the user.
Log in to Okta Admin Dashboard using the user.
Move on to the "Create an API Token with Okta" section.
Create an API token in Okta:
Go to the admin console ({domain}-admin.okta.com):
On the side bar, go to Security → API.
Go to the “Tokens” tab, and click on “Create Token”:
Name the token as you wish(preferably mention that this token is used for Axiom integration), and click on “Create Token”:
Copy the token value and store it aside to create the integration on the Axiom system:
💡 For more information on Okta API tokens please refer to Okta documentation here: https://developer.okta.com/docs/guides/create-an-api-token/main/#okta-api-tokens
Axiom Side:
Create the Axiom Okta Integration:
Go to the axiom application, and navigate to the integrations page:
Click on add Okta integration:
Choose a name for the integration and click Continue:
Fill in the organization domain ({domain}.okta.com), and the API key from section 1, and click Integrate:
