All integrations
Connect Okta to Polara
A read-only admin API token. Pulls users with last sign-in, multi-factor authentication (MFA) enrollment, sign-on policies, admin roles and deprovisioned users.
What you connect
Credential. Read-only admin API token.
- Okta address
- Your Okta sign-in address. For example https://stark-industries.okta.com.
- API token
- Shown once when you create it.
Where to find it
The connect dialog in your dashboard shows these steps next to the fields.
- Sign in to the Okta Admin Console as a Read-only Administrator.
- Open Security, then API, then Tokens.
- Choose Create token, name it Polara, and paste it here.
Read-only. An Okta token has the permissions of the admin who creates it. Create it as a Read-only Administrator and Polara can only read. Okta keeps 90 days of system log, so Polara's history for Okta starts the day you connect.
What Polara collects
6 evidence itemsEach item lists the System and Organization Controls 2 (SOC 2) criteria it carries and the control it supports.
| Evidence | What it shows | Controls it satisfies |
|---|---|---|
| Users and last sign-in | Okta users with their status and last sign-in time. | Controls it satisfies: CC6.2, CC6.3, CC1.5Okta user list for access reviews |
| Multi-factor enrollment | How many active users have at least one active multi-factor authentication factor. | Controls it satisfies: CC6.1, CC6.6Multi-factor authentication (MFA) enrollment in Okta |
| Sign-on policies | Sign-on and authentication policies, and whether their rules require multi-factor authentication. | Controls it satisfies: CC6.1, CC6.6Okta policies that require multi-factor authentication |
| Admin role assignments | The users who hold an Okta admin role, and which role each one holds. | Controls it satisfies: CC6.3Named privileged admins |
| Deprovisioned users | Users deprovisioned in the collection window, with the date their status changed. | Controls it satisfies: CC6.2, CC6.3Offboarding: which Okta accounts were deprovisioned |
| System log summary | Counts of system log events by type over the collection window, never the message bodies. | Controls it satisfies: CC4.1, CC7.2Admin activity logged in Okta |
Connect Okta from your dashboard.
Create an account, open Integrations, and paste the API token.
Take the free assessmentAlready a customer? Open Integrations