Connect Okta

Elba uses two Okta application configurations: one for administrator sign-in and one service integration for directory synchronization.

Required Okta role

Complete setup with an active Super Administrator or Application Administrator account.

Information to prepare

The Elba setup flow asks for:

• your Okta domain;
• the administrator email address;
• the client ID and client secret for the SSO application;
• the client ID and client secret for the service integration.

The service integration must be allowed to read:

okta.apps.read
okta.users.read
okta.roles.read
okta.groups.read

The SSO application requests okta.users.read.self for the signed-in administrator.

Connect Okta

1. Open the Okta setup flow provided by Elba.
2. Enter your Okta domain and administrator email.
3. Create or select the SSO and service applications using the in-product instructions for your environment.
4. Grant the four read scopes above to the service integration.
5. Copy the client IDs and secrets into the matching Elba fields.
6. Submit the configuration and sign in through Okta when prompted.
7. Configure your Elba workspace and allow the initial directory synchronization to finish.

If the Okta console labels or application types differ from the instructions shown in your Elba workspace, stop and contact Elba support before creating a second production application.