Bulk Imports of Sudo Rules for Okta Privileged Access using Workflows

This article showcases two new features of Okta Privileged Access - Sudo command bundles and the Okta Privileged Access Workflows connector. It shows how a standard workflow mechanism can be used for bulk-loading sudo commands, specifically for commands to work with OpenLDAP. IntroductionAn Example - Importing OpenLDAP CommandsOpenLDAP CommandsThe Import FilesCommand Bundles after ImportPolicies and … Continue reading Bulk Imports of Sudo Rules for Okta Privileged Access using Workflows →

Centrally Managing SUDO Rules with Okta Privileged Access

Sudo provides a granular access control mechanism on many *nix variants (if you run a Mac, sudo is the thing prompting for the password when you try to do something). The ability to centrally manage sudo rules and grant access via policy has recently been added to Okta Privileged Access. This article explores the new … Continue reading Centrally Managing SUDO Rules with Okta Privileged Access →

Generating Okta Privileged Access Reports with the new Workflows Connector

Okta recently released a Workflows connector for Okta Privileged Access. It provides an abstraction of many of the Okta Privileged Access APIs to make working with them in Workflows easier. This article is an exploration of using the new connector to produce Okta Privileged Access reports, specifically access reports for users and resources. IntroductionOverviewConstruction of … Continue reading Generating Okta Privileged Access Reports with the new Workflows Connector →

Okta Privileged Access and Automation with DevOps Tools

This article looks at how Okta Privileged Access (OPA) can leverage DevOps tooling for automation in large infrastructure environments. IntroductionClient Deployment and ManagementAgent and Gateway Deployment and ManagementBaked into the ImageIncluded in IaaS Run ScriptsIncluded in Build Scripts for DevOps ToolsExamples and SamplesTerraform ExampleAnsible ExampleSome Sample CodeConclusion Introduction Okta Privileged Access (OPA) provides privileged access … Continue reading Okta Privileged Access and Automation with DevOps Tools →

Using Custom Labels in OPA for More Flexible Policies

This article looks at the new custom labels feature in Okta Privileged Access (OPA) and how they can be used to make policy management and assignment more flexible. This is a parity feature that was available in Okta Advanced Server Access and is now available in OPA. Labels in Okta Privileged Access When a server … Continue reading Using Custom Labels in OPA for More Flexible Policies →

MFA Can Now Be Applied to Secret Access Policy in Okta Privileged Access

Okta Privileged Access (OPA) has had the option to turn on Multifactor Authentication (MFA) for server access policy for some time. This has now been extended to cover secret access policy. If you have worked with OPA Policy Rules for Secrets you will be familiar with the following that shows the permissions that can be … Continue reading MFA Can Now Be Applied to Secret Access Policy in Okta Privileged Access →

The New Checkout Feature in Okta Privileged Access

This article provides information on the latest feature released for Okta Privileged Access - Checkout. This feature allows setting exclusive checkout on shared accounts and manage the checkout/checkin of those accounts. Pre-ReqsEnable Checkout for Servers in a ProjectCheckout from the Command LineCheckout from the Web UIForcing a Check InConclusion Pre-Reqs The feature is there in … Continue reading The New Checkout Feature in Okta Privileged Access →

Managing Access in Okta Privileged Access with the new OIG Resource Catalog

Okta has released into Early Access a new feature called the Access Request Conditions and Resource Catalog, or more simply the Resource Catalog. This is a new way to configure and use access requests in Okta Identity Governance. This article shows how this can be applied to access within Okta Privileged Access. IntroductionA Quick Revision … Continue reading Managing Access in Okta Privileged Access with the new OIG Resource Catalog →

Privileged Access Management for AWS using Okta Workforce Solutions

This article is a summary of a presentation I recently gave looking at Okta Workforce Identity Cloud and Amazon Web Services (AWS). It is focused on how privileged access management can be applied to AWS users and access, leveraging the different Identity and Access Management (IAM) capabilities in Okta. IntroductionAccess Management and AWS PrivilegesIdentity Administration, … Continue reading Privileged Access Management for AWS using Okta Workforce Solutions →

Okta Privileged Access: Secret Rotation Reminder

This article is to help to rotate static credentials managed by the Okta Privileged Access vault by sending a reminder to the security team if the secret is vaulted and has not been rotated for more than 30 days (configurable). The Security team can take action and rotate the secrets. This solution is provided as … Continue reading Okta Privileged Access: Secret Rotation Reminder →