Connect AI agents to resources

Connect an AI agent to a resource through a managed connection.

Before you begin

  • You have the super admin role.
  • If you want to connect AI agents to secrets or service accounts, you have the Okta Privileged Access security admin role.
  • You've completed the configuration tasks for the resources that you want to use. See AI agent managed connections.
  • You've registered an AI agent in your org.

Start this task

  1. In the Admin Console, go to DirectoryAI Agents.
  2. Select an AI agent.
  3. Select the Managed connections tab.
  4. Click Add connection.
  5. Select a resource type.
    • Authorization server: Select an authorization server from the dropdown list. Select Allow all to grant all available scopes to the AI agent. Or, select Only allow or Disallow and enter the scopes that you want to grant or deny the AI agent.
    • Secret: Select the secret that you want to use, and then accept or modify the Resource Indicator. This is the identifier that the AI agent uses when it requests the secret from Okta.
    • Service account: Select an app and a service account, and then accept or modify the Resource Indicator. This is the identifier that the AI agent uses when it requests the service account from Okta.

      This resource type is only available if you have the Manage service accounts Early Access feature. Contact Okta Support to enable it.

    • Application: Select Okta Integration Network (OIN) app or Custom resource server. Then select an app instance or custom resource server, respectively. The Resource Indicator populates automatically.
    • MCP server: Select an MCP server from the list. The Resource Indicator populates automatically.
  6. Click Add. The resource appears on the Managed connections tab.
  7. To edit the resource connection, click the vertical ellipses that's next to the resource and select Edit connection. Make the required changes and click Save.
  8. To deactivate or remove the resource connection, click the vertical ellipses that's next to the resource and select Deactivate connection. To remove it, click the vertical ellipses again and select Remove connection.

You can reactivate a deactivated connection by selecting Activate connection from the vertical ellipsis.

Next step

Govern access to AI agents