{"Name":"okta","ID":"go.mondoo.com/cnquery/v9/providers/okta","Version":"13.6.0","ConnectionTypes":["okta"],"CrossProviderTypes":null,"Connectors":[{"Name":"okta","Use":"okta","Short":"an Okta organization","Long":"Use the okta provider to query resources in an Okta organization.\n\nTo query an Okta organization, you need the organization's domain and credentials to access that domain. To learn how, read https://mondoo.com/docs/cnspec/identity/okta.\n\nThere are two ways to authenticate. An API token is the simplest, but it inherits the privileges of the admin who created it. A service application authenticates with a private key JWT and holds only the scopes it was granted, so it can be limited to read-only access.\n\nExamples:\n  cnspec shell okta -organization \u003cokta-domain\u003e -token \u003capi-token\u003e\n\tcnspec scan okta -organization \u003cokta-domain\u003e -token \u003capi-token\u003e\n\tcnspec scan okta -organization \u003cokta-domain\u003e -client-id \u003cclient-id\u003e -private-key \u003cpem-or-path\u003e -private-key-id \u003ckey-id\u003e -scopes okta.users.read,okta.groups.read\n","Flags":[{"Long":"organization","Desc":"The domain of the Okta organization to scan","Type":3},{"Long":"token","Desc":"Access token for the Okta organization","Type":3},{"Long":"client-id","Desc":"Client ID of the Okta service app to authenticate as","Type":3},{"Long":"private-key","Desc":"Private key of the Okta service app, either the PEM itself or a path to it","Type":3},{"Long":"private-key-id","Desc":"ID of the public key registered with the Okta service app","Type":3},{"Long":"scopes","Desc":"Okta API scopes to request for the service app, separated by commas","Type":3}]}],"AssetUrlTrees":[{"path_segments":["technology=saas","provider=okta"],"key":"kind","values":{"org":null},"title":"Kind"}],"Platforms":[{"name":"okta-org","title":"Okta Organization","family":["okta"],"kind":["api"],"runtime":["okta"]}]}