> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta_Agent

> A synchronization or authentication agent in Okta

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Overview

The Okta\_Agent node represents an Okta Agent, which is a component used in Okta's integration with on-premises systems. Okta Agents facilitate communication between the Okta cloud and on-premises applications or directories, enabling features such as single sign-on (SSO) and user provisioning.

One or more agents are grouped into Agent Pools, represented by the [Okta\_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) nodes, to provide redundancy and load balancing.

<img src="https://mintcdn.com/specterops/vLZ2lUIRm_HibFmq/images/extensions/okta/bloodhound-ad-agent.png?fit=max&auto=format&n=vLZ2lUIRm_HibFmq&q=85&s=1b7abcf9c818afdd60376179af4c471d" alt="Active Directory Agent in BloodHound" width="1563" height="1062" data-path="images/extensions/okta/bloodhound-ad-agent.png" />

## Edges

<Note>
  The tables below list edges defined by the Okta extension only. Additional edges to or from this node may be created by other extensions.
</Note>

### Inbound Edges

| Edge Type                                                            | Source Node Types                     | Traversable |
| -------------------------------------------------------------------- | ------------------------------------- | ----------- |
| [Okta\_HostsAgent](/opengraph/extensions/okta/edges/okta_hostsagent) | [Computer](/resources/nodes/computer) | ✅           |

### Outbound Edges

| Edge Type                                                                  | Destination Node Types                                             | Traversable |
| -------------------------------------------------------------------------- | ------------------------------------------------------------------ | ----------- |
| [Okta\_AgentMemberOf](/opengraph/extensions/okta/edges/okta_agentmemberof) | [Okta\_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) | ✅           |

## Properties

| Name                 | Source                               | Type       | Description                                                                                                                                             |
| -------------------- | ------------------------------------ | ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `id`                 | `agent.id`                           | `string`   | Unique agent identifier.                                                                                                                                |
| `name`               | `agent.name`                         | `string`   | Agent name shown in Okta Admin Console.                                                                                                                 |
| `display_name`       | `agent.name`                         | `string`   | Display label used in BloodHound.                                                                                                                       |
| `okta_domain`        | Collector context (non-API)          | `string`   | Okta organization domain where the agent exists.                                                                                                        |
| `pool_name`          | `agentPool.name`                     | `string`   | Name of the parent [Okta\_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool). For AD pools this typically corresponds to the synced AD domain. |
| `operational_status` | `agent.operationalStatus`            | `string`   | Runtime health/operational state reported by Okta.                                                                                                      |
| `update_status`      | `agent.updateStatus`                 | `string`   | Agent software update state.                                                                                                                            |
| `type`               | `agent.type`                         | `string`   | Agent type (for example AD, LDAP, IWA, or RADIUS).                                                                                                      |
| `version`            | `agent.version`                      | `string`   | Agent software version.                                                                                                                                 |
| `pool_id`            | `agent.poolId`                       | `string`   | Identifier of the parent Okta agent pool.                                                                                                               |
| `last_connection`    | `FromUnixTime(agent.lastConnection)` | `datetime` | Timestamp of the last successful agent connection to Okta.                                                                                              |

## Sample Property Values

```yaml theme={null}
id: a53xfufl4rqWcHhQo697
name: LON-SRV01
display_name: LON-SRV01
pool_id: 0oaxg9rhdd7ncGCXv697
okta_domain: contoso.okta.com
pool_name: contoso.local
operational_status: DISRUPTED
update_status: Cancelled
type: AD
version: 3.22.0
last_connection: 2026-01-15T02:29:40+00:00
```