Third-party admins

Some organizations have a business need to set up administrator roles in Okta for individuals who perform admin functions but are not direct employees of the organization. The parent organization may even create a custom portal for administrator functions, so that third-party admins do not even see the Okta interface.

One use case for this feature is if Support services are outsourced to third parties. These third parties act on behalf of the organization managing users needs but do not actually see the Okta user interface.

Another use case is in a B2B2C scenario where a "hub-and-spoke model" is set up with end customers (external users) created as admins so they can run their own Okta org, often with a custom portal created with Okta APIs so these external users aren’t aware that they are admins in Okta.

In both these scenarios, because the external users are given admin roles within Okta, they receive the default Okta admin emails: welcome emails, admin email alerts and Okta customer notifications.

By introducing the concept of a third-party admin in Okta, we are able to treat these admins differently than the typical Okta admins who interact directly with the Okta Admin Console.

Third-party admins will not receive any Okta email notifications, or have the ability to contact Okta support on behalf of your organization.

Prerequisites

You must be a super admin to configure this option.


Enable the third-party admin option

This topic assumes you have already created the users in Okta and are ready to grant them administrator privileges.

To enable third-party admin functionality:

  1. In the Admin Console, go to Settings > Account.
  2. Click Edit on Third-Party Admins.
  3. Select the check box, and then click Save.

Grant the third-party role to a user

  1. In the Admin Console, go to Security > Administrators.
  2. Click Add Administrator.
  3. Enter the name of the user.
  4. Select the admin roles this user should have, including Third Party Admin.
  5. Click Add Administrator.

Grant third-party admin status to an existing Okta group

  1. In the Admin Console, go to Security > Administrators.
  2. Click Add Administrator.
  3. Enter the name of the user.
  4. Select the admin roles this user should have, including Third Party Admin.
  5. Click Add Administrator.

Related Topics

Grant admin privileges

Super admin role

Administrators