
sjyns (sjyns) asked a question.
Questions regarding API Token
When OKTA is installed for the first time is an API token created? Our security software flagged a user installing OKTA as an "Attempt to create OKTA API token" and I want to clarify that this is the case.

Hello @sjyns (sjyns),
The Okta API tokens are used to authenticate requests to Okta APIs. When calling an Okta API endpoint, you need to supply a valid API token in the HTTP Authorization header, with a valid token specified as the header value.
You can learn more about this topic using the link below:
https://help.okta.com/en/prod/Content/Topics/Security/API.htm
Have a great day ahead.
Regards,
Natalia
Okta Inc.
Okta agents use API tokens, so for example, the first time you install and configure the Okta AD agent, the agent account will generate an API token, which it will use for all subsequent tasks in Okta. Go take a look at the Security -> API -> Tokens page and you'll find them listed there. It's totally normal.