← All integrationsOkta integration
Connect Okta to Edict IQ
Use the Edict IQ API Service integration to provide read-only access to identity, group, application and audit evidence from your Okta organization.
Before you start
- You need permission in Okta to install and configure an API Service integration.
- You need an Edict IQ workspace role that can manage integrations.
- Keep the generated client secret confidential. Treat it as a credential.
Configuration
- 1
Install Edict IQ in Okta
In the Okta Admin Console, open the Okta Integration Network and install the Edict IQ API Service integration for the organization you want to connect.
- 2
Copy the connection details
Record your Okta organization URL and the Client ID and Client Secret generated for the Edict IQ installation. The credentials are specific to that Okta organization.
- 3
Connect the organization in Edict IQ
Open the integrations area in your Edict IQ workspace, select Okta, and enter the Okta organization URL, Client ID and Client Secret. Submit the connection form.
- 4
Verify the connection
Edict IQ verifies the credentials before using the connection for governed identity, access and audit evidence workflows.
Read-only access requested
The integration requests only the read scopes required for the current evidence workflow. It does not create, modify or delete Okta resources.
okta.users.read- Read user profiles and account metadata available through this scope.
okta.groups.read- Read groups and group membership information.
okta.apps.read- Read application information.
okta.logs.read- Read Okta System Log entries for audit evidence.
How authentication works
Each customer installation receives its own Client ID and Client Secret. Edict IQ uses OAuth 2.0 Client Credentials to obtain short-lived access tokens. No Okta user password is collected, and this service-to-service flow does not use offline_access.
Disconnect or revoke access
To stop access, remove or deactivate the Edict IQ API Service integration in the Okta Admin Console. You can also remove the Okta connection from the integrations area in Edict IQ. Revoked credentials can no longer be used to request new access tokens.