Integration profile
Directory source · Okta Workforce Identity
Configure a read-only source and preview identity matching before apply.
Demo baseline · November 13, 2026Connection and scope
Read /api/v1/users with scoped OAuth okta.users.read (recommended) or a least-privileged SSWS token. Secret JSON: accessToken, or token with authScheme ssws. Link-header pagination is followed on the same origin. Suspended/deprovisioned states are imported only if Active is mapped and disabling is explicitly permitted.
- Transport
okta- External ID
id- Default coalescing path
profile.email
Provider fields
| Key | Label | Example |
|---|---|---|
path | Users collection path and filter | /api/v1/users?limit=200 |
Default mapping
| Source | Target | Transform |
|---|---|---|
profile.firstName | firstName | text |
profile.lastName | lastName | text |
profile.email | email | lower |
profile.login | username | lower |
profile.employeeNumber | employeeNumber | text |
id | ldapCorrelationId | text |
Verify and troubleshoot
Preview, apply, and diagnose a directory import. Verify the immutable key, existing-account match, complete pagination and disable thresholds before applying.