> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta_OutboundSSO

> Single sign-on from Okta to an external identity provider

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [Okta\_User](/opengraph/extensions/okta/nodes/okta_user)
* Destination: [AZUser](/resources/nodes/az-user), [GH\_User](/opengraph/extensions/github/nodes/gh_user), [jamf\_Account](/opengraph/extensions/jamf/nodes/jamf_account), [SNOW\_User](https://github.com/SpecterOps/SnowHound), [Okta\_User](/opengraph/extensions/okta/nodes/okta_user)
* Traversable: ✅

## General Information

The traversable hybrid Okta\_OutboundSSO edges represent Single Sign-On relationships between Okta users and their linked accounts in external applications using federated authentication (SAML 2.0 or OIDC).

```mermaid theme={null}
graph LR
    subgraph okta["Okta"]
        u1("Okta_User john\@contoso.com")
        u2("Okta_User alice\@contoso.com")
    end
    subgraph github["GitHub"]
        ghu1("GH_User john\@contoso.com")
        ghu2("GH_User alice\@contoso.com")
    end
    subgraph jamf["Jamf"]
        jamfu1("jamf_Account john\@contoso.com")
    end
    subgraph snowflake["Snowflake"]
        snu1("SNOW_User john\@contoso.com")
    end
    u1 -- Okta_OutboundSSO --> ghu1
    u1 -- Okta_OutboundSSO --> jamfu1
    u2 -- Okta_OutboundSSO --> ghu2
    u1 -- Okta_OutboundSSO --> snu1
```