Agent configuration file
Each Okta Provisioning Agent has a corresponding configuration file.
The location of the configuration file depends on which operating system the agent is installed.
- Linux: /opt/OktaProvisioningAgent/agent.config
- Windows: C:\Program Files\Okta\On-Premises Provisioning Agent\current\user\config\ProvisioningAgent\agent.config
The following table describes each setting in the configuration file. Don't modify entries that are set by the system.
| Setting | Description |
| agentId | An ID used by Okta to identify the agent. Set by system. |
| orgUrl | The Okta org that the agent is registered with. Set by system. |
| env | The type of Okta environment. Set by system. |
| subdomain | The subdomain of the Okta org. Set by system. |
| clientId | An ID used by Okta to identify the client. Set by system. |
| agentKey | A key used by the agent to communicate with Okta. Set by system. |
| deviceCode | A code used by the OIDC flow. Set by system. |
| oAuth2TokenPollIntervalSeconds | A token used by the OIDC flow. Set by system. |
| userCode | A code used by the OIDC flow. Set by system. |
| verificationUri | A URI used by the OIDC flow. Set by system. |
| principalId | An internal ID code. Set by system. |
| instanceId | An ID for the instance. Set by system. |
| proxyEnabled | Specifies whether a proxy is being used. The default value is false. Set during installation by the installer, but can be modified. |
| proxyScheme | The proxy scheme being used. Set during installation by the installer, but can be modified. |
| proxyHost | The proxy host address. Set during installation by the installer, but can be modified. |
| proxyPort | The port that the proxy uses for communications. Set during installation by the installer, but can be modified. |
| proxyUser | The user the proxy is acting as. Set during installation by the installer, but can be modified. |
| proxyPassword | The password for the user the proxy is acting as. Set during installation by the installer, but can be modified. |
| allowHttp | Specifies whether to allow HTTP traffic. The default value is false, which is recommended as only allowing HTTPS traffic is more secure. |
| groupDeltaSupported | Enabling this option can speed up incremental imports when your SCIM server supports sending updated group information since its last download token. In this case, set both this and incrementalImportPerformanceImprovement to true. |
| incrementalImportPerformanceImprovement | Enabling this option can speed up incremental imports when your SCIM server supports sending updated group information since its last download token. In this case, set both this and groupDeltaSupported to true. |
| lastModifiedTimeZoneIsInUTC |
Specifies whether the last modified timestamps used for incremental imports are reported using Coordinated Universal Time (UTC). The default value is true, effective in agent version 3.0.2. This change adheres to SCIM RFC 7644 for consistent time-based communication. Okta recommends implementing filters to process the last modified value in UTC. To revert to the previous non-UTC behavior, set this variable to false in the agent.conf file and restart the app. If you encounter any issues, contact Okta Support. |
| propertyKey | A key used for internal purposes. Set by system. |