> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Schema

> Okta extension schema definition

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Metadata

**Name:** SOOkta<br />
**Display Name:** Okta Extension (by SpecterOps)<br />
**Version:** v2.8.1<br />
**Namespace:** Okta<br />
**Environment Kind:** Okta\_Organization<br />
**Source Kind:** Okta

<Info>
  This file is automatically generated from the [extension schema definition file](https://github.com/SpecterOps/openhound-okta/blob/main/extension/schema.json).
</Info>

## Nodes

| Icon                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Node Kind                                                                                  | Display Name                 |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ | ---------------------------- |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_agent.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=3998d7295695fa86beb82a03fc5afe89" alt="Okta_Agent" width="32" height="32" data-path="images/extensions/okta/okta_agent.png" />                                                                                                                                                 | [Okta\_Agent](/opengraph/extensions/okta/nodes/okta_agent)                                 | Okta Agent                   |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_agentpool.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=1d63e41d3fa0b6b7639bc6fe7bc0a9c1" alt="Okta_AgentPool" width="32" height="32" data-path="images/extensions/okta/okta_agentpool.png" />                                                                                                             | [Okta\_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool)                         | Okta Agent Pool              |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_apiserviceintegration.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=898a007a3142d40cbfda72bdd7e6eee4" alt="Okta_ApiServiceIntegration" width="32" height="32" data-path="images/extensions/okta/okta_apiserviceintegration.png" /> | [Okta\_ApiServiceIntegration](/opengraph/extensions/okta/nodes/okta_apiserviceintegration) | Okta API Service Integration |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_apitoken.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=97e51cf1dc45a168ba58157a1d26da17" alt="Okta_ApiToken" width="32" height="32" data-path="images/extensions/okta/okta_apitoken.png" />                                                                                                                      | [Okta\_ApiToken](/opengraph/extensions/okta/nodes/okta_apitoken)                           | Okta API Token               |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_application.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=a5546dc2b993a762587777679253c489" alt="Okta_Application" width="32" height="32" data-path="images/extensions/okta/okta_application.png" />                                                                                           | [Okta\_Application](/opengraph/extensions/okta/nodes/okta_application)                     | Okta Application             |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_authorizationserver.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=ddf0234e942c08123243ec1958e9931a" alt="Okta_AuthorizationServer" width="32" height="32" data-path="images/extensions/okta/okta_authorizationserver.png" />                   | [Okta\_AuthorizationServer](/opengraph/extensions/okta/nodes/okta_authorizationserver)     | Okta Authorization Server    |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_clientsecret.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=cbfaa3ba430d2a53ffa7d10d63317972" alt="Okta_ClientSecret" width="32" height="32" data-path="images/extensions/okta/okta_clientsecret.png" />                                                                                  | [Okta\_ClientSecret](/opengraph/extensions/okta/nodes/okta_clientsecret)                   | Okta Client Secret           |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_customrole.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=7511a0ed182665ceb4aa4dfb3236453e" alt="Okta_CustomRole" width="32" height="32" data-path="images/extensions/okta/okta_customrole.png" />                                                                                                    | [Okta\_CustomRole](/opengraph/extensions/okta/nodes/okta_customrole)                       | Okta Custom Role             |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_device.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=bdb718d97e464848a9466644e175b0be" alt="Okta_Device" width="32" height="32" data-path="images/extensions/okta/okta_device.png" />                                                                                                                                        | [Okta\_Device](/opengraph/extensions/okta/nodes/okta_device)                               | Okta Device                  |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_group.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=2b554b56a4c7a56b6796e45c87566d1a" alt="Okta_Group" width="32" height="32" data-path="images/extensions/okta/okta_group.png" />                                                                                                                                                 | [Okta\_Group](/opengraph/extensions/okta/nodes/okta_group)                                 | Okta Group                   |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_identityprovider.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=694aa334cff6a7520089d62c321dfb7b" alt="Okta_IdentityProvider" width="32" height="32" data-path="images/extensions/okta/okta_identityprovider.png" />                                              | [Okta\_IdentityProvider](/opengraph/extensions/okta/nodes/okta_identityprovider)           | Okta Identity Provider       |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_jwk.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=f867db7d5cfd2a9f2065fccd64f8e1bb" alt="Okta_JWK" width="32" height="32" data-path="images/extensions/okta/okta_jwk.png" />                                                                                                                                                                   | [Okta\_JWK](/opengraph/extensions/okta/nodes/okta_jwk)                                     | Okta JWK                     |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_organization.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=2816afd96ffeea34cdfd1f44a20e5807" alt="Okta_Organization" width="32" height="32" data-path="images/extensions/okta/okta_organization.png" />                                                                                  | [Okta\_Organization](/opengraph/extensions/okta/nodes/okta_organization)                   | Okta Organization            |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_policy.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=1ecce95a8488cdef2f4e478bade619d8" alt="Okta_Policy" width="32" height="32" data-path="images/extensions/okta/okta_policy.png" />                                                                                                                                        | [Okta\_Policy](/opengraph/extensions/okta/nodes/okta_policy)                               | Okta Policy                  |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_realm.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=d7d068f9a39eab74ed7988c1da738d1b" alt="Okta_Realm" width="32" height="32" data-path="images/extensions/okta/okta_realm.png" />                                                                                                                                                 | [Okta\_Realm](/opengraph/extensions/okta/nodes/okta_realm)                                 | Okta Realm                   |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_resourceset.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=1112946bf8a565fe4a296d8524003f67" alt="Okta_ResourceSet" width="32" height="32" data-path="images/extensions/okta/okta_resourceset.png" />                                                                                           | [Okta\_ResourceSet](/opengraph/extensions/okta/nodes/okta_resourceset)                     | Okta Resource Set            |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_role.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=a3068f4d7b0b2f32834e0eac1607e673" alt="Okta_Role" width="32" height="32" data-path="images/extensions/okta/okta_role.png" />                                                                                                                                                          | [Okta\_Role](/opengraph/extensions/okta/nodes/okta_role)                                   | Okta Role                    |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_roleassignment.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=d3384116f1e24f32abe167cd3f5050ae" alt="Okta_RoleAssignment" width="32" height="32" data-path="images/extensions/okta/okta_roleassignment.png" />                                                                | [Okta\_RoleAssignment](/opengraph/extensions/okta/nodes/okta_roleassignment)               | Okta Role Assignment         |
| <img src="https://mintcdn.com/specterops/qNfIJ1tRHGvzCfpH/images/extensions/okta/okta_user.png?fit=max&auto=format&n=qNfIJ1tRHGvzCfpH&q=85&s=8038efa9163e3e9fe23dfc853b9c5cc2" alt="Okta_User" width="32" height="32" data-path="images/extensions/okta/okta_user.png" />                                                                                                                                                          | [Okta\_User](/opengraph/extensions/okta/nodes/okta_user)                                   | Okta User                    |

## Edges

| Relationship Kind                                                                        | Traversable | Description                                                                            |
| ---------------------------------------------------------------------------------------- | :---------: | -------------------------------------------------------------------------------------- |
| [Okta\_AddMember](/opengraph/extensions/okta/edges/okta_addmember)                       |      ✅      | Ability to add or remove members in scoped Okta groups                                 |
| [Okta\_AgentMemberOf](/opengraph/extensions/okta/edges/okta_agentmemberof)               |      ✅      | Membership of an Okta agent in an agent pool                                           |
| [Okta\_AgentPoolFor](/opengraph/extensions/okta/edges/okta_agentpoolfor)                 |      ✅      | Relationship between an AD agent pool and its backing AD application                   |
| [Okta\_ApiTokenFor](/opengraph/extensions/okta/edges/okta_apitokenfor)                   |      ✅      | User ownership of an Okta API token                                                    |
| [Okta\_AppAdmin](/opengraph/extensions/okta/edges/okta_appadmin)                         |      ✅      | Application administrator role assignment                                              |
| [Okta\_AppAssignment](/opengraph/extensions/okta/edges/okta_appassignment)               |      ❌      | Assignment of users or groups to an Okta application                                   |
| [Okta\_Contains](/opengraph/extensions/okta/edges/okta_contains)                         |      ✅      | Contains relationship between the Okta organization and its objects                    |
| [Okta\_CreatorOf](/opengraph/extensions/okta/edges/okta_creatorof)                       |      ❌      | Creator relationship for API service integrations                                      |
| [Okta\_DeviceOf](/opengraph/extensions/okta/edges/okta_deviceof)                         |      ❌      | Ownership relationship between a device and its assigned user                          |
| [Okta\_GroupAdmin](/opengraph/extensions/okta/edges/okta_groupadmin)                     |      ✅      | Group administrator role assignment                                                    |
| [Okta\_GroupMembershipAdmin](/opengraph/extensions/okta/edges/okta_groupmembershipadmin) |      ✅      | Group membership administrator role assignment                                         |
| [Okta\_GroupPull](/opengraph/extensions/okta/edges/okta_grouppull)                       |      ✅      | Import of group memberships from an external application                               |
| [Okta\_GroupPush](/opengraph/extensions/okta/edges/okta_grouppush)                       |      ❌      | Provisioning of group memberships to an external application                           |
| [Okta\_HasRole](/opengraph/extensions/okta/edges/okta_hasrole)                           |      ❌      | Assignment of a built-in or custom role to a principal                                 |
| [Okta\_HasRoleAssignment](/opengraph/extensions/okta/edges/okta_hasroleassignment)       |      ❌      | Relationship between a principal and a role assignment                                 |
| [Okta\_HelpDeskAdmin](/opengraph/extensions/okta/edges/okta_helpdeskadmin)               |      ✅      | Help desk administrator role assignment                                                |
| [Okta\_HostsAgent](/opengraph/extensions/okta/edges/okta_hostsagent)                     |      ✅      | Relationship between an AD server and the Okta agent running on that host              |
| [Okta\_IdentityProviderFor](/opengraph/extensions/okta/edges/okta_identityproviderfor)   |      ✅      | Trust relationship between an identity provider and Okta users                         |
| [Okta\_IdpGroupAssignment](/opengraph/extensions/okta/edges/okta_idpgroupassignment)     |      ❌      | Identity provider group assignment to an Okta group                                    |
| [Okta\_InboundOrgSSO](/opengraph/extensions/okta/edges/okta_inboundorgsso)               |      ✅      | Single sign-on from an external organization into Okta                                 |
| [Okta\_InboundSSO](/opengraph/extensions/okta/edges/okta_inboundsso)                     |      ✅      | Single sign-on from an external identity provider into Okta                            |
| [Okta\_KerberosSSO](/opengraph/extensions/okta/edges/okta_kerberossso)                   |      ✅      | Agentless desktop SSO relationship from on-prem AD user account to Okta AD application |
| [Okta\_KeyOf](/opengraph/extensions/okta/edges/okta_keyof)                               |      ✅      | JSON Web Key associated with an Okta application                                       |
| [Okta\_ManageApp](/opengraph/extensions/okta/edges/okta_manageapp)                       |      ✅      | Ability to manage scoped Okta applications                                             |
| [Okta\_ManagerOf](/opengraph/extensions/okta/edges/okta_managerof)                       |      ❌      | Manager relationship between Okta users                                                |
| [Okta\_MemberOf](/opengraph/extensions/okta/edges/okta_memberof)                         |      ✅      | Membership of a user in an Okta group                                                  |
| [Okta\_MembershipSync](/opengraph/extensions/okta/edges/okta_membershipsync)             |      ✅      | Bidirectional synchronization between Okta groups and external groups                  |
| [Okta\_MobileAdmin](/opengraph/extensions/okta/edges/okta_mobileadmin)                   |      ✅      | Mobile administrator role assignment                                                   |
| [Okta\_OrgAdmin](/opengraph/extensions/okta/edges/okta_orgadmin)                         |      ✅      | Organization administrator role assignment                                             |
| [Okta\_OrgSWA](/opengraph/extensions/okta/edges/okta_orgswa)                             |      ❌      | Secure Web Authentication from an Okta application to an external organization         |
| [Okta\_OutboundOrgSSO](/opengraph/extensions/okta/edges/okta_outboundorgsso)             |      ✅      | Single sign-on from an Okta application to an external organization                    |
| [Okta\_OutboundSSO](/opengraph/extensions/okta/edges/okta_outboundsso)                   |      ✅      | Single sign-on from Okta to an external identity provider                              |
| [Okta\_PasswordSync](/opengraph/extensions/okta/edges/okta_passwordsync)                 |      ✅      | Password synchronization between user accounts via AD integration, Org2Org, or SCIM    |
| [Okta\_PolicyMapping](/opengraph/extensions/okta/edges/okta_policymapping)               |      ❌      | Association of a policy with an Okta application                                       |
| [Okta\_ReadClientSecret](/opengraph/extensions/okta/edges/okta_readclientsecret)         |      ✅      | Ability to read client secrets for scoped Okta applications                            |
| [Okta\_ReadPasswordUpdates](/opengraph/extensions/okta/edges/okta_readpasswordupdates)   |      ✅      | Application can read password updates over the SCIM protocol                           |
| [Okta\_RealmContains](/opengraph/extensions/okta/edges/okta_realmcontains)               |      ✅      | Contains relationship between an Okta realm and its users                              |
| [Okta\_ResetFactors](/opengraph/extensions/okta/edges/okta_resetfactors)                 |      ✅      | Ability to reset MFA factors for scoped Okta users                                     |
| [Okta\_ResetPassword](/opengraph/extensions/okta/edges/okta_resetpassword)               |      ✅      | Ability to reset passwords or temporary credentials for scoped Okta users              |
| [Okta\_ResourceSetContains](/opengraph/extensions/okta/edges/okta_resourcesetcontains)   |      ✅      | Membership of objects within an Okta resource set                                      |
| [Okta\_ScopedTo](/opengraph/extensions/okta/edges/okta_scopedto)                         |      ❌      | Scope relationship between a role assignment and its target                            |
| [Okta\_SecretOf](/opengraph/extensions/okta/edges/okta_secretof)                         |      ✅      | Client secret associated with an application or service integration                    |
| [Okta\_SuperAdmin](/opengraph/extensions/okta/edges/okta_superadmin)                     |      ✅      | Super administrator role assignment                                                    |
| [Okta\_SWA](/opengraph/extensions/okta/edges/okta_swa)                                   |      ❌      | Secure Web Authentication from Okta to an external application                         |
| [Okta\_UserPull](/opengraph/extensions/okta/edges/okta_userpull)                         |      ❌      | Import of users from an external application                                           |
| [Okta\_UserPush](/opengraph/extensions/okta/edges/okta_userpush)                         |      ❌      | Provisioning of users to an external application                                       |
| [Okta\_UserSync](/opengraph/extensions/okta/edges/okta_usersync)                         |      ❌      | Bidirectional synchronization between Okta users and external identities               |