Okta Identity Security Posture Management (ISPM) release announcements

Generally Available features

Integrate Microsoft Active Directory (on-premises) with ISPM

Microsoft Active Directory on-premises (AD on-premises) is one of the primary attack vectors that often overwhelm teams with its complexity and lack of visibility. When you integrate ISPM with your AD on-premises instance, ISPM provides the clarity and visibility you need to harden your environment against modern threats and help secure your domains. Integrating your AD on-premises instance with ISPM using your existing Okta AD agent is seamless, taking only a few clicks.

By bringing your on-premises identity lifecycle into Okta's unified platform, you get the following key capabilities:

• Visualize nested groups: ISPM maps complex, overprivileged access structures to reduce your attack surface.

• Detect vulnerable identities: ISPM automatically detects unused human and service accounts or identities with stale passwords, including high-privilege admin accounts.

• Discover unsynced accounts: ISPM identifies shadow identities and groups that exist in AD on-premises instance but haven't been synced to Okta or Entra ID.

See Microsoft Active Directory (AD on-premises) integration.