To make API calls to the Okta service, Okta Workflows must have an authorized connection. This document will walk through the steps to authorize an Okta Workflows connection to the Okta service.
- Okta Workflows
- Okta Connector
NOTE: The Okta user who signed in while setting up the connection is the account that will be associated with the actions taken by Workflows. In many cases, it is a best practice to create a dedicated Super Admin service account for Okta Workflows and authorize the connection using that account. For more info on this, see Actions Taken by Okta Workflows are Attributed to a User Account in the System Log.
- In the Okta Workflows Console, go to Connections.
-
Click New Connection. All available connectors appear.
-
Select the Okta connector. A new Connection window appears.
-
In the New Connection window, enter the Connection Nickname. This is the display name intended to appear in the list of connections.
-
Enter the Okta domain without the https://. eg. "atko.okta.com" in the Domain field.
-
Open a new tab and navigate to the Okta Admin Console.
-
Navigate to Applications -> Applications, and select the Okta Workflows OAuth application.
-
Click the Sign On tab, and copy the Client ID by clicking the Clipboard icon.
-
Flip back to the Workflows Console tab and paste the Client ID into the Client ID field.
-
Flip back to the Okta Admin Console tab, and copy the Client secret by clicking the Clipboard icon.
-
Flip back to the Workflows Console tab and paste the Client secret into the Client Secret field.
- Ensure to click on the Permissions tab as outlined in the Okta Workflows Connection - Insufficient Scope article.
-
Click Create.
For a detailed walkthrough of the Authorization process, please see the video below.
