Tag: API

Using the Secrets API with Okta Privileged Access

Okta Privileged Access has the ability to store and retrieve generic secrets in it's vault. This can be done via the user interface, the sft client in the command line or via the Secrets API. This article will explore the Secrets API for managing secrets in the vault. Overview Secrets management involves both folders (and … Continue reading Using the Secrets API with Okta Privileged Access →

Supporting Shared Accounts via SAML

This article explains how you can extend and configure Okta within the shared account use case. Credits to Nicholas Connelly for sharing this approach. Disclaimer: This approach is not part of security best practices because it can be exploited and be abused by rogue administrators. I would recommend to look at this workaround if you … Continue reading Supporting Shared Accounts via SAML →

Okta Privileged Access and the Reports API – Who has Access to What and How?

With the release of Okta Privileged Access, an API has also been released to provide programmatic access into objects managed by it, such as servers, secrets and gateways. There is a set of Access Reports APIs to allow for external reporting on who has access to what and how. This article explores the APIs, the … Continue reading Okta Privileged Access and the Reports API – Who has Access to What and How? →

Okta API Access Management: a Dark Knight metaphor

Recently, while thinking about what topic I should select for a new article, my gaze stopped on my desk. As often, a Batman comic was next to my right screen (for those who wonder, it was "Gotham Nocturne"). Then came to me a very geeky idea : if I were to explain some Okta concepts … Continue reading Okta API Access Management: a Dark Knight metaphor →

Choosing Specific Factors in OIE with the API

Note: Okta has released Authentication Method Chains which provide a simpler method of specifying factors. See this blog post for more detail.Okta Identity Engine provides increased flexibility for Authentication with Application Level Policies and easy to configure passwordless sign-in experiences. These are covered extensively in our deployment guides: Authentication policies deployment guide and Passwordless authentication deployment … Continue reading Choosing Specific Factors in OIE with the API →