Data Integration Guide - Okta
Granting Access
Privilege Level
Different Okta API operations require different admin privilege levels. API tokens inherit the privilege level of the admin account that is used to create them. It is therefore good practice to create a service account to use when you create API tokens so that you can assign the token the specific privilege level needed.
Create a Read-Only Administrator Account
First, you will need to create a read-only administrator account for Okta. To create the account, follow the steps below:
- Log in to your Okta console.
- Navigate to Directory > People.
- Click Add person.
- In the Add Person pop-up window that opens, enter the details for the new user.
- Click Save to create the new user.
- Navigate to Security > Administrators.
- Click + Add administrator.
- Fill out the fields on the Administrator assignment by admin page. For more information about these fields, see below:
- Admin: Select the user you created in step 5 above.
- Role: Select Read-only Administrator.
- Click Save Changes to create the new administrator account.
Create an API Token
- Log in to your Okta console with the read-only administrator account you created above.
- Navigate to Security > API.
- Select the Tokens tab.
- Click Create Token.
- Enter a name for the token.
- Click Create Token. Once you click this button, your token will display.
ℹ️ Be sure to copy the token and store it in a secure location where you can easily retrieve it later.
Permissions
API |
Endpoints |
Access Level |
/api/v1/users |
read |
|
/api/v1/logs |
read |
Required Information
The values Living Security will need to access the API are:
- Authentication Token
- Host