The OpenHound Okta collector is the SpecterOps-supported tool for retrieving Okta organization data for BloodHound.
If you are evaluating collector options for the Okta extension, this is the recommended path. An alternative collector, OktaHound, also exists, but this documentation section focuses specifically on the OpenHound-based collector.
Authentication Options
The OpenHound Okta collector supports two authentication methods:- OAuth 2.0 service application: Recommended for most environments because it supports scoped, read-only collection.
- API token: Simpler to set up, but less secure and tied to a Super Administrator account.
Next Steps
- Review Configure the Collector
- Register an OAuth 2.0 service application
- Import the resulting data with the Okta OpenGraph extension