01hfp (01hfp) asked a question.
Okta Verified for an integration in the OIN - what does it mean?
From the Okta glossary:
Okta Verified. In the Okta Integration Network, this status means that the integration was built, tested, and verified by Okta, or it was built by a partner, and then tested and verified by Okta.
I have two questions regarding this:
- Is it possible for me to differentiate between integrations that were built by Okta and those that were built by a partner?
- In case the developer is a partner, does Okta verify that the partner really owns the website and support contacts that are provided in the integration listing page?
Hi @01hfp (01hfp),
Thank you for posting on the Okta community page!
I have done some research but unfortunately I wasn't able to find a way to differentiate the applications that are built by Okta from the ones built by a partner therefore I would assume you could submit a feature request to have this functionality. The best way to file a feature request would be from the Community site.
Once feature requests are submitted they are visible to other Okta admins, who can vote on them to provide more visibility. Using this method will allow you to maintain visibility on your feature requests throughout the process.
In regards to your second question, in order to have an application added to the OIN, clients can access the OIN manager page that I have provided bellow in order to complete the process. After the form is completed, the Admin who made the request will discuss with the Okta Team to add the app in the OIN.
I hope the above information is useful!
On another note, the Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.
Thank you Flaviu!
Regarding the first question, I will file a feature request as per your recommendation.
Regarding the second question, I will try to rephrase: say I come across an integration in the OIN with a support email and/or homepage. Can I be sure that the developer/publisher of the integration indeed owns the support email and homepage? The reason that I'm asking is that if no verification of domain ownership is performed on Okta's side, I am concerned that a malicious actor could publish an app to the OIN and submit innocent-looking domains for the support email and homepage that he doesn't really own.