> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta_Agent

> A synchronization or authentication agent in Okta

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Overview

The Okta\_Agent node represents an Okta Agent, which is a component used in Okta's integration with on-premises systems. Okta Agents facilitate communication between the Okta cloud and on-premises applications or directories, enabling features such as single sign-on (SSO) and user provisioning.

One or more agents are grouped into Agent Pools, represented by the [Okta\_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) nodes, to provide redundancy and load balancing.

<img src="https://mintcdn.com/specterops/vLZ2lUIRm_HibFmq/images/extensions/okta/bloodhound-ad-agent.png?fit=max&auto=format&n=vLZ2lUIRm_HibFmq&q=85&s=1b7abcf9c818afdd60376179af4c471d" alt="Active Directory Agent in BloodHound" width="1563" height="1062" data-path="images/extensions/okta/bloodhound-ad-agent.png" />

## Edges

<Note>
  The tables below list edges defined by the Okta extension only. Additional edges to or from this node may be created by other extensions.
</Note>

### Inbound Edges

| Edge Type                                                            | Source Node Types                     | Traversable |
| -------------------------------------------------------------------- | ------------------------------------- | ----------- |
| [Okta\_HostsAgent](/opengraph/extensions/okta/edges/okta_hostsagent) | [Computer](/resources/nodes/computer) | ✅           |

### Outbound Edges

| Edge Type                                                                  | Destination Node Types                                             | Traversable |
| -------------------------------------------------------------------------- | ------------------------------------------------------------------ | ----------- |
| [Okta\_AgentMemberOf](/opengraph/extensions/okta/edges/okta_agentmemberof) | [Okta\_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) | ✅           |

## Properties

| Name                | Source                               | Type       | Description                                                                                                                                             |
| ------------------- | ------------------------------------ | ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `id`                | `agent.id`                           | `string`   | Unique agent identifier.                                                                                                                                |
| `name`              | `agent.name`                         | `string`   | Agent name shown in Okta Admin Console.                                                                                                                 |
| `displayName`       | `agent.name`                         | `string`   | Display label used in BloodHound.                                                                                                                       |
| `oktaDomain`        | Collector context (non-API)          | `string`   | Okta organization domain where the agent exists.                                                                                                        |
| `poolName`          | `agentPool.name`                     | `string`   | Name of the parent [Okta\_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool). For AD pools this typically corresponds to the synced AD domain. |
| `operationalStatus` | `agent.operationalStatus`            | `string`   | Runtime health/operational state reported by Okta.                                                                                                      |
| `updateStatus`      | `agent.updateStatus`                 | `string`   | Agent software update state.                                                                                                                            |
| `type`              | `agent.type`                         | `string`   | Agent type (for example AD, LDAP, IWA, or RADIUS).                                                                                                      |
| `version`           | `agent.version`                      | `string`   | Agent software version.                                                                                                                                 |
| `poolId`            | `agent.poolId`                       | `string`   | Identifier of the parent Okta agent pool.                                                                                                               |
| `lastConnection`    | `FromUnixTime(agent.lastConnection)` | `datetime` | Timestamp of the last successful agent connection to Okta.                                                                                              |

## Sample Property Values

```yaml theme={null}
id: a53xfufl4rqWcHhQo697
name: LON-SRV01
displayName: LON-SRV01
poolId: 0oaxg9rhdd7ncGCXv697
oktaDomain: contoso.okta.com
poolName: contoso.local
operationalStatus: DISRUPTED
updateStatus: Cancelled
type: AD
version: 3.22.0
lastConnection: 2026-01-15T02:29:40+00:00
```