Included Types
The Okta adapter fetches and deploys the following element types:
Applications
This includes both Group Push settings and application-group assignments.
Groups
Deployment is limited to native Okta groups, see about group types for more information.
Group Rules
Brands - Including email and page customizations
Domains
Authentication policies
Global Session policies (Okta sign-on policy in Classic Engine)
Password policies
Profile Enrollment policies (only available for OIE)
MFA enrollment policies
User, Group and Application schemas
Profile Mappings
By default, Salto does not fetch Profile Mapping properties and their push status. To include these properties, see Okta Settings article.
Authenticators
Behavior Rules
Network Zones
Account settings
SMS Templates
Trusted Origins
Device Assurance Policies (only available for OIE)
Identity Providers
IdP policies
Authorization Servers - Including scopes, claims, and policies
Users - Excluded by default but can be enabled through Okta settings.
Group Assignments - Excluded by default but can be enabled through Okta settings.
Roles
Features
Security Settings
Read-only elements
In addition to the elements listed above, the Okta adapter also supports the following types in a read-only format:
Event Hooks
Inline Hooks
Resource Sets
Some configuration elements are not fetched by default by Salto. However, they can be included for existing environments through your Okta settings.