Okta service accounts

Early Access release

Use Okta Privileged Access to manage and secure your Okta user accounts that are managed as service accounts. Discover and bring these accounts from Okta Universal Directory into Okta Privileged Access management, so you can control who gets access to these accounts and when.

View checked-out accounts

Resource admins can view which accounts are currently checked out and by who. If required, they can force a check-in on any accounts. See Checkout.

Configure project settings

Configure the setting to adjust password complexity, enable password rotation schedule, and enable checkout.

On the Okta Privileged Access dashboard, go to Resource Administration Resource Management
Select the resource group that contains the project you want to configure.
Click a project that you want to configure.
Go to the Settings tab.

Click Edit.

Action	Task
Password complexity	Enter the minimum and maximum characters that you want to enforce. Under Password includes, select one or more options to include in the password. Select the checkbox under Advanced settings to require at least 1 character from each set. Click Save.
Schedule password rotation	Select Schedule password rotation for checkbox, and then complete the following: Select one of the following: All accounts that support rotation All accounts except. If you select this option, click the dropdown and select one or more accounts to be excluded from password rotation. Only these accounts. If you select this option, click the dropdown and select one or more accounts to be included from password rotation. Enter Quantity, and then select the Unit to set the frequency for password rotation. Click Save.
Checkout Only Okta Privileged Access security admins can configure this setting.	Select Enable checkout for checkbox, and then complete the following: Select one of the following: All accounts that support checkout All accounts except. If you select this option, click the dropdown and select one or more accounts to be excluded from checkout. Only these accounts. If you select this option, click the dropdown and select one or more accounts where checkout will be enabled. Enter Quantity, and then select the Unit to set the maximum checkout time. Click Save.

Action

Task

Password complexity

Enter the minimum and maximum characters that you want to enforce.
Under Password includes, select one or more options to include in the password.
Select the checkbox under Advanced settings to require at least 1 character from each set.
Click Save.

Schedule password rotation

Select Schedule password rotation for checkbox, and then complete the following:

Select one of the following:
- All accounts that support rotation
- All accounts except. If you select this option, click the dropdown and select one or more accounts to be excluded from password rotation.
- Only these accounts. If you select this option, click the dropdown and select one or more accounts to be included from password rotation.
Enter Quantity, and then select the Unit to set the frequency for password rotation.
Click Save.

Checkout

Only Okta Privileged Access security admins can configure this setting.

Select Enable checkout for checkbox, and then complete the following:

Select one of the following:
- All accounts that support checkout
- All accounts except. If you select this option, click the dropdown and select one or more accounts to be excluded from checkout.
- Only these accounts. If you select this option, click the dropdown and select one or more accounts where checkout will be enabled.
Enter Quantity, and then select the Unit to set the maximum checkout time.
Click Save.

Okta service accounts

View checked-out accounts

Configure project settings

Related topics