Skip to main content

Okta Integration

This guide walks you through connecting Okta to ComplyJet using a dedicated read-only service account and API token.

Written by Upendra Varma

ComplyJet integrates with Okta to sync your user directory for access reviews and identity compliance, in support of frameworks like SOC 2 and ISO 27001.

This guide walks you through the process of connecting Okta to ComplyJet — it's a 4-step wizard under Setup → Integrations → Okta → Connect.

Step 1: Verify Okta User Email Access

ComplyJet needs access to the Okta user email field to sync personnel identities correctly.

  1. Sign in to Okta as an administrator.

  2. Go to Directory > Profile Editor.

  3. Open Users > User (default) under the Profile tab.

  4. Check the Primary email field permissions and ensure it is at least Read Only (not Hidden).

Step 2: Copy Organization Domain

From your Okta dashboard, copy your Okta organization domain in hostname format only (e.g. acme.okta.com) — you'll enter it during connection.

Step 3: Create Service Account

Okta lets you generate the API token from your own admin account or from a dedicated service account.

  • Option 1 — Use your own admin account. The token inherits all of your permissions — if you're a Super Admin, that means full administrative access to your Okta environment. Not recommended for security reasons.

  • Option 2 — Recommended: use a dedicated service account. Create a new user under Directory > People to act as ComplyJet's service account, with these values:

    • User type: User

    • First name: ComplyJet

    • Last name: Service Account

    • Username / Primary email: [email protected]

    • Activation: Activate now

    • Password: set a strong password and store it securely

    After the user is created, go to Security > Administrators and assign that account the Read-only Administrator role — this ensures the token has only the minimal read permissions required for compliance monitoring.

Step 4: Generate API Token

  1. If you created a dedicated service account, log out and sign back in as that account. If you used your existing admin account, stay signed in with it.

  2. Navigate to Security > API > Tokens.

  3. Create a new token and copy it immediately — you can only view it once.

  4. Paste it into ComplyJet and click Save & Test Connection.

You're Done!

Once connected, ComplyJet begins pulling your Okta user directory automatically for access reviews and identity compliance checks.

Did this answer your question?

Related Articles