Authorization

Authorize this connector by creating a connection to your Okta account. You can reuse this connection the next time that you build a flow with this connector. If you want to create a new connection for a different Okta org, see the Authorize an account from another Okta org.

For additional information, see Guidance for Okta connector.

Create a connection from the current Okta org

  1. In the Okta Workflows Console, go to Connections.

  2. Click New Connection. All available connectors appear.

  3. Select the Okta connector. New Connection window appears.

  4. In the New Connection window, enter the Connection Nickname. This is the display name you want to appear in your list of connections.

  5. Enter Domain, Client ID, and Client Secret.

  6. Click Create.

The new connection appears in the Connections list.

Authorize an account from another Okta org

Create a new connection for an Okta org different from your current org using the following procedures:

  1. Create an OpenID Connect web app in the target Okta org.

  2. Configure the OpenID Connect web app.

  3. Authorize an account from the target Okta org.

If you want to create a new connection for the current Okta org, see the section Authorize an account from the current Okta org.

Create an OpenID Connect web app in the target Okta org

  1. In the Okta Admin Console of your target Okta org, go to Applications > Applications.

  2. Click Create App Integration.

  3. In the Create a new app integration window, select OIDC - OpenID Connect for the Sign-on Method, and set the Application type to Web application. Click Next. New Web App Integration page appears.

  4. On the page, enter your Application name. This is the app display name.

  5. Enter the Sign-in redirect URIs for the app. Note that you must enter the URI for the location where the app resides, not the target org. For example, to connect to an Okta Preview org from a Production org, use https://oauth.workflows.okta.com/oauth/okta/cb.

  6. Click Save.

The app is created and appears on the Applications page.

Configure the OpenID Connect web app

  1. In the Okta Admin console, go to Applications > Applications.

  2. Select your newly created application.

  3. On the General tab, click Edit.

  4. In the Allowed Grant Types list, select Refresh Token.

  5. Click Save.

  6. Select the Assignments tab, and then click Edit.

  7. Assign the app to the appropriate users. You can assign it to individual people or to groups. Note: The user must be a Super Admin.

  8. Save your assignments.

  9. On the Okta API Scopes tab, grant consent for the scopes required for your use cases. See List of available scopes in the Okta connector.

  10. Click Save.

The app is now configured and an assigned user can create a new connection for this org.

Authorize an account from the target Okta org

To perform this procedure:

  • You must be assigned to the OpenID Connect web app created in the previous procedures.

  • You must have Super Admin credentials.

You also need the following information for authorizing your Okta account:

  • Domain: Your Okta org domain. If the URL of your Okta org is https://yourcompany.okta.com, then your domain is yourcompany.okta.com.

  • Client ID and Client Secret: The client ID and client secret from your OAuth2 app. To find this, in the Okta Admin Console, go to Applications > Applications > Your OpenID Connect web app > Sign On tab > Sign On Methods.

  1. In the Okta Workflows Console, go to Connections.

  2. Click New Connection. All available connectors appear.

  3. Select the Okta connector. New Connection window appears.

  4. In the New Connection window, enter the Connection Nickname. This is the display name you want to appear in your list of connections.

  5. Enter Domain, Client ID, and Client Secret.

  6. Click Create.

The new connection appears in the Connections list.

Related topics

Okta connector

Workflow elements

Guidance for Okta connector

Okta API documentation