Third-Party admins

Some organizations have a business need to to set up administrator roles in Okta for individuals who perform adminAn abbreviation of administrator. This is the individual(s) who have access to the Okta Administrator Dashboard. They control the provisioning and deprovisioning of end users, the assigning of apps, the resetting of passwords, and the overall end user experience. Only administrators have the Administration button on the upper right side of the My Applications page. functions but are not direct employees of the organization. The parent organization may even create a custom portal for administrator functions, so that third-party admins do not even see the Okta interface.

One use case for this feature is if Support services are outsourced to third parties. These third parties act on behalf of the organization managing users needs but do not actually see the Okta user interface.

Another use case is in a B2B2C scenario where a "hub-and-spoke model" is set up with end customers (external users) created as admins so they can run their own Okta orgThe Okta container that represents a real-world organization., often with a custom portal created with Okta APIs so these external users aren’t aware that they are admins in Okta.

In both these scenarios, because the external users are given admin roles within Okta, they receive the default Okta admin emails: welcome emails, admin email alerts and Okta customer notifications.

By introducing the concept of a third-party admin in Okta, we are able to treat these admins differently than the typical Okta admins who interact directly with the Okta Admin Console.

Third party admins will not receive any Okta email notifications, or have the ability to contact Okta support on behalf of your organization.

Prerequisites

You must be a super admin to configure this option.


Enable the Third-party admin option

This topic assumes you have already created the users in Okta and are ready to grant them administrator privileges.

To enable Third-Party admin functionality:

  1. From the Admin Console, navigate to Settings > Account. The Account page appears.
  2. Click Edit on Third-Party Admins.
  3. Select the check box and Save.

Grant the Third-Party role to a user

  1. From the Admin Console, navigate to Security > Administrators. The Administrator page is displayed.
  2. Click Add Administrator.
  3. Enter the name of the user.
  4. Select the admin roles this user should have, including Third Party Admin.
  5. Click Add Administrator.

Grant Third-Party admin status to an existing Okta group

  1. From the Admin Console, navigate to Security > Administrators. The Administrator page is displayed.
  2. Click Add Administrator.
  3. Enter the name of the user.
  4. Select the admin roles this user should have, including Third Party Admin.
  5. Click Add Administrator.

Related Topics

Grant Admin privileges

The Super admin role

Administrators

Top