Okta Integration Wizard overview
The Okta Integration Wizard (OIW), similar to the Classic experience (formerly called the App Integration Wizard), helps you build and deploy private app integrations directly in your Okta org.
Use it to integrate apps that aren't in the Okta Integration Network (OIN) catalog, such as internal tools, homegrown apps, or third-party apps whose APIs don't support standard protocols.
Creating and deploying a private app integration using the Okta Integration Wizard (OIW) has the following benefits:
- Customize capabilities: Configure capabilities not supported in the Classic experience, such as SCIM provisioning, Entitlement Management, and API Integration Actions. The available capabilities vary based on your subscription.
- Reuse: You can create and deploy an app integration once and use it as a template to create multiple app instances from it. Each instance that you create using the app integration has the same capabilities as the app integration without requiring individual reconfiguration.
- Bulk update: Update a deployed app integration and redeploy it to apply changes to all associated app instances at once.
How it works
When you use OIW to create an app integration, Okta creates a reusable template in your org's Private Apps section of the OIN Catalog. After you deploy the app integration once, you can create app instances from it and assign the app instances (often referred to as apps) to users or groups. Creating app instances is a separate step that occurs outside of the OIW.
In the Classic experience, there is no app integration object. You can't reuse same configuration across instances without creating each app instance individually.
-
Choose OIW as your wizard to create an app integration if you want to use any of the following capabilities:
-
Single Sign-On (SSO) with OIDC or SAML
-
Provisioning with SCIM or API Integration Actions
-
Entitlement Management with SCIM or API Integration Actions
Note: Use the Classic experience instead if you want to do the following things:- Use OIDC, SAML, SWA for SSO
- Use OIDC for a single page, web, or native app
- Use OAuth 2.0 for secure API service integrations.
-
- Deploy the app integration using OIW.
- Find the app integration in the Private apps section of the OIN catalog in your org to add an app instance that's based on it or to edit the app integration itself.
App integrations can't be deleted after creation. You can deactivate or delete individual app instances from .
OIW and the Classic experience
| Functionality | Classic experience | OIW |
|---|---|---|
| SSO (SAML/OIDC) | Yes | Yes |
| SSO (SWA) | Yes | No |
| SCIM provisioning | Partial (three template apps only) | Yes |
| Entitlement Management | No | Yes |
| API Integration Actions | No | Yes |
| Wizard output | App instance only | App integration (reusable template) |
Use OIW when any of the following apply:
- You need SCIM provisioning, Entitlement Management, Universal Logout, or API Integration Actions.
- You're building a new integration and want the ability to edit and redeploy it later.
- Your integration uses SAML or OIDC with a web app.
Use the Classic experience when any of the following apply:
- You need SWA.
- You need a single-page app or native app type.
- You have an existing integration built with the Classic experience and aren't ready to migrate.
- You need more flexible API service integration configuration.
Key concepts
- App integration
- The reusable configuration object that OIW creates when you create a private integration. It defines the integration's protocols, capabilities, and settings. After it's deployed, it lives in your org's Private apps section of the OIN Catalog and serves as the source template for creating app instances. You can edit an app integration and redeploy it but you can't delete it. A single app integration supports up to 1000 app instances.
- App instance
- A deployed representation of an app integration, assigned to users or groups in your org. App instances appear in . You can deactivate or delete app instances.
- Okta Integration Wizard (OIW)
- The guided wizard in the Admin Console for creating and deploying private app integrations in your Okta orgs. Okta creates a reusable template in your org's Private Apps section of the OIN Catalog. OIW supports SSO, SCIM provisioning, and Entitlement Management. You can also integrate custom apps whose APIs don't support standard protocols using API Integration Actions. Integrations are deployed to the current org only. Multi-org deployment is planned for a future release.
- Classic experience
- The existing Classic experience for creating private SSO integrations in the Admin Console. It creates app instances directly. There is no shared app integration template. Each app instance requires individual configuration. Supports SAML, OIDC, SWA, and API service integrations.
- OIN Wizard
- A separate wizard available only in Integrator Free Plan orgs. Independent Software Vendors and developers usually use the OIN Wizard to build and submit integrations to the public OIN catalog.