URL handler

You can create URLs that follow a specific format, which causes the Okta Privileged Access URL handler to be invoked when the URL is clicked. The client then takes the information passed from the URL handler and attempts to connect to the target server. These URLs are often used for daily interfaces such as dashboards, ticketing and monitoring systems, and logs.

Setup

Use the following template to set up your URL handler:

scaleft://[<sft-username>@]<pam-team-fqdn>/t/<team>/a/<target>/<access-method>?via=[<username>@]<bastion>

All the information in square brackets [ ] is optional.

Examples

The following are examples of URL handlers:

  • scaleft://app.orgname.pam.okta.com/t/okta-demo-only/a/ubuntu-target/ssh
  • scaleft://app.orgname.pam.okta.com/t/okta-demo-only/a/ubuntu-target/ssh?via=ubuntu-bastion

Check for correct URL handling

You can verify that the URL handlers are working as expected by checking the Okta Privileged Access client logs, which log both clicks and the handling of the URL.

If you're using a Windows machine, the client logs are in c:\users\<username>\appdata\local\scaleft\logs.

If you're using a Mac, the client logs are in ~/Library/Logs/ScaleFT/sft/.