Okta Spoke
Use Okta to manage users, passwords, and groups.
Request apps on the Store
Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
Integration Hub subscription
This spoke requires an Integration Hub subscription. For more information, see Legal schedules - IntegrationHub overview.
Spoke version
Okta spoke v4.8.0 is the latest version.
Spoke dependencies
If you’re having trouble installing the app, ensure that these dependent plugins are installed:
- ServiceNow IntegrationHub Action Template - Data Stream (com.glide.hub.action_type.datastream)
- ServiceNow IntegrationHub Action Step - REST (com.glide.hub.action_step.rest)
- ServiceNow IntegrationHub Runtime (com.glide.hub.integration.runtime)
- ServiceNow Flow Designer - Dynamic Inputs (com.glide.hub.dynamic_inputs)
- ServiceNow IntegrationHub Action Step - REST (com.glide.hub.action_step.rest)
- com.glide.cobject:sys,com.glide.script.vtable
- com.snc.remote_directory_sync
- XML Parser for ServiceNow IntegrationHub (com.glide.hub.action_step.xmlparser)
- Flow Designer Model (com.glide.hub.designer_backend.model)
- Complex Object (com.glide.cobject)
Note: Some of these plugins are licensable features and require an appropriate license if used outside the spoke implementation. For information on licenses, contact your account manager.
Supported versions
API version v1.
Spoke flows
The Okta spoke provides sample flows in the draft state to demonstrate automating user and group management tasks. To customize a sample flow, copy it to a new application scope. Available sample flows include:
| Flow | Description |
|---|---|
| Add User to Okta Group | When a user is created, it adds the user to the specified group. |
| Onboard User in Okta | When a user is created in ServiceNow, creates and activates the user in Okta. |
| Remove Okta Group Membership on Deactivation | When a user is deactivated, it removes the user from all Okta groups. |
Note: Okta has the ServiceNow_UD application to provision users in ServiceNow. ServiceNow can also be configured to provision users at Okta. Therefore, ServiceNow administrators must confirm that circular user creation doesn’t occur.
Spoke subflows
The Okta spoke provides sample subflows to demonstrate automating Okta tasks. Available subflows are:
| Subflow category | Subflow | Description |
|---|---|---|
| Webhook management | Check Activate Application Event Hook | Verifies if an event hook for the application-lifecycle-activate exists in Okta. |
| Inbound Integration from Okta to ServiceNow | Allows inbound integration from Okta to a ServiceNow instance. Verifies if an event hook exists for an application. If the event hook doesn’t exist, a new event hook is created. Note: Make sure that Configuration URI field value is in this format: https://<instance-name>.service-now.com/api/sn_okta_spoke/oktawebhook | |
| Group Management | Get Groups | Updates an existing group or creates a group at Okta. |
| Application Management | Create or Update Okta Applications Record | Creates an Okta application record or updates an existing Okta application record. |
Available sample conversational subflows
Install Now Assist for Conversational Spokes and start using the conversational ability of Integration Hub spokes. For more information, see ServiceNow Otto for Conversational Spokes.
| Conversational subflow | Description |
|---|---|
| Expire User Password - Sample | Expires the user's password in Okta. |
| Reset to Temporary Password - Sample | Resets the user's password in Okta to a temporary password. |
| Look up Group Details - Sample | Retrieves details of the required group in Okta. |
| Look up User Profile - Sample | Retrieves details of the required user profile in Okta. |
| Add User to Group - Sample | Adds user to the required group. |
| Look up Group Members - Sample | Retrieves details of users in the required group in Okta. |
| Is User in Group - Sample | Specifies if the user is a member of the provided group. |
| Look up Users by Application - Sample | Retrieves details of users that have access to the specific application. |
Spoke modules
The Okta spoke adds the Okta application to your ServiceNow instance and includes these modules:
| Module | Description |
|---|---|
| Okta Applications | Shows the list of applications. Click New to create an application record. |
| Okta groups | Shows the list of user groups at Okta. Click Fetch Okta Groups to retrieve details of the Okta groups. For more information, see Fetch Okta groups. |
| Okta Users | Shows the list of users at Okta.This is a remote table. When you click the Okta Users module, Okta Users [sn_okta_spoke_users] remote table definition is triggered and user details are cached in memory. For more information about the remote tables, see Remote tables. You can modify script definition of the Okta Users [sn_okta_spoke_users] remote table definition as per your requirement. |
| Okta Webhook Registry | Shows the list of webhook registries. Click New to create a webhook registry. For more information, seeSet up a bi-directional webhook for Okta spoke. |
Spoke actions
The Okta spoke provides actions to authenticate and manage users and groups. Available actions include:
| Category | Action | Description |
|---|---|---|
| User Management | Activate User | Starts the process of activating a user at Okta by enabling new or returning users to configure their Okta account from an activation URL. This action can either have Okta send the activation URL to the user as an email, or it can return the activation URL as a data pill for use in a later action to send an email or notification. |
| Clear User Session | Clears all active sessions you have with Okta, which forces the user to log back in the next time they use Okta. | |
| Create User | Creates the specified user at Okta with the specified standard, optional, and mandatory field values.Note: Okta has the ServiceNow_UD application to provision users in ServiceNow. ServiceNow can also be configured to provision users at Okta. Therefore, ServiceNow administrators must confirm that circular user creation doesn’t occur. | |
| Deactivate User | Deactivates the specified user at Okta, which removes the user's groups and application assignments, and changes the user status to DEACTIVATED. This action is commonly used when a user departs the company indefinitely. Note: Don’t perform this action on users with a DEPROVISIONED status. | |
| Delete User | Deletes the specified user within Okta, which completely removes the user. This action is commonly used to clean up your user base after compliance regulations have been met. | |
| Is User Account Locked | Determines if a user account is locked. | |
| Lookup Okta User ID | Retrieves the Okta user ID for the specified Okta login ID or login short name. | |
| Lookup User Account Details by User ID | Retrieves user details for the specified Okta user ID. | |
| Lookup User Profile by User ID | Retrieves user profile details for the specified Okta user ID. | |
| Restart User Activation | Restarts the specified user's activation within Okta. Use this action if the user didn’t complete their activation with the activation code or link provided by the Activate User Action. | |
| Suspend User | Suspends the specified user within Okta by changing the user status from ACTIVE to SUSPENDED. For example, use this action to suspend access for users who are on temporary leave. To reactivate a suspended user, use the Unsuspend action. | |
| Unsuspend User | Unsuspends the specified user at Okta. | |
| Update User Profile | Updates the user profile details for the specified user at Okta. | |
| Look up Users Stream | Retrieves users from Okta based on the filter value. | |
| Password Management | Change User's Password | Changes the specified user's password after validating the user's current password. |
| Expire User Password | Expires the specified user's password within Okta. This action is commonly used as a reaction to stop breaching attempts. | |
| Reset to Temporary Password | Resets the specified user's password within Okta to a temporary password. This action is commonly used to get a user logged in who has forgotten their password. | |
| Reset User Factors | Resets all of the multi-factor access devices for the specified user within Okta. This action is commonly used when a user loses their multi-factor authentication device or method. | |
| Set User Password | Sets the specified user's password in Okta. | |
| Unlock User | Unlocks the specified user in Okta. | |
| Group Management | Add User To Group | Adds the specified user to the specified group in Okta. |
| Create Group | Creates the specified group in Okta. | |
| Get Groups | Retrieves all new and updated groups in Okta. | |
| Is User In Group | Determines if the specified user is a member of the specified group in Okta. | |
| Lookup Group Details by Group ID | Retrieves group details for the specified Okta group ID. | |
| Lookup Group ID By Name | Retrieves group details and group ID for the specified Okta group name. | |
| Remove User From Group | Removes the specified user from the specified Okta group ID. | |
| Update Group | Updates the group details for the specified Okta group ID. | |
| Look up Groups Stream | Retrieves groups from Okta, based on the filter criteria. | |
| Group Membership Management | Look up Group Members Stream | Retrieves users from the specified Okta group. |
| Look up User Groups Stream | Retrieves the group information from Okta to which the user belongs to. | |
| Application Access Management | Look up Users by Application ID Stream | Retrieves users who have access to the specified application. |
| Look up Groups by Application ID Stream | Retrieves groups who have access to the specified application. | |
| Revoke User Application Access | Revokes access to an application for the required user. | |
| Application Management | Look up Applications Stream | Retrieves applications from Okta, based on the filter criteria. For more information about the criteria you can specify in the Filter input, see List applications in Okta Developer Documentation. |
| Look up Application by Application ID | Retrieves details of the specified application ID in Okta. | |
| Look up App Launcher Applications Stream | Retrieves applications that are either active or are assigned to users. | |
| Logs Management | Look up Okta Logs Stream | Retrieves the logs in Okta that are filtered by the given filter value and within the specified time duration. For more information about the event types and system logs, see Event Types in Okta Developer Documentation. |
| Metadata Retrieval | Look up Additional Fields for User | Retrieves the metadata of the additional fields for a user in Okta. |
| Look up Applications Metadata | Retrieves the metadata of applications in Okta. | |
| Look up Event Hooks Metadata | Retrieves the metadata of the event hooks in Okta.Note: Make sure that you use this action along with the actions that use Event Hook ID as a dynamic input. | |
| Look up Groups Metadata | Retrieves the metadata details of the groups in Okta. | |
| Webhook Management | Activate Event Hook | Changes the status of the specified event hook to active in Okta. |
| Create Event Hook | Creates an active event hook in Okta. Note: Make sure that Configuration URI field value is in this format: https://<instance-name>.service-now.com/api/sn_okta_spoke/oktawebhook | |
| Deactivate Event Hook | Sets the status of the specified Okta event hook to inactive. | |
| Look up Event Hook by ID | Retrieves details of the Okta event hook for the specified ID. | |
| Look up Event Hooks | Retrieves details of all the event hooks in Okta. | |
| Update Event Hook | Updates the specified event hook in Okta. Note: Make sure that Configuration URI field value is in this format: https://<instance-name>.service-now.com/api/sn_okta_spoke/oktawebhook | |
| Verify Event Hook | Verifies and retrieves an external service endpoint configured for an event hook in Okta. |
Available conversational actions
Install Now Assist for Conversational Spokes and start using the conversational ability of Integration Hub spokes. For more information, see ServiceNow Otto for Conversational Spokes.
Available conversation action is Create Group that creates a group in Okta with the provided details.
Available AI agents
Install Now Assist for Integration Hub and start using the available AI agents. For more information, see ServiceNow Otto for Integration Hub.
This spoke provides standalone AI agents that mimic human-like intelligence to perform tasks in your ServiceNow instance.
In the ServiceNow agentic system, you can create an agentic workflow that comprises of a set of large language model (LLM) instructions along with one or more standalone AI agents to execute an objective. See for information about adding AI agents to create agentic workflows as per your requirement and provide the required trigger.
You can also search for other available AI agents and add them to your agentic workflow. See Find AI agents for more information.
You can create a clone of the required spoke AI agent and customize it as per your requirement. See for more information about creating a clone.
- See for information about AI agents.
Available AI agents include:
| AI Agent | Description |
|---|---|
| Okta group management AI agent | Automates group-related tasks in Okta using Integration Hub such as those related to managing of groups, handling user memberships, and retrieving group details. |
| Okta password management AI agent | Automates password-related workflows in Okta from Integration Hub. Automate actions such as reset password to temporary values, set new password, expire passwords, unlock user accounts, reset user authentication factors, and change user passwords. |
| Okta group membership management AI agent | Automates group-related workflows in Okta from Integration Hub. Automate actions such as Look up User Groups Stream’, and 'Look up Group Members Stream'. |
| Okta user management AI agent | Automates user management workflows in Okta from Integration Hub. Automate actions such as manage user accounts, sessions, and statuses. |
| Okta application access management AI agent | Automates access management workflows in Okta from Integration Hub. Automate actions such as look up users and groups by application ID stream, and revoking user application access. |
| Okta application management AI agent | Automates application management-related workflows in Okta from Integration Hub. Automate actions such as look up applications, retrieve application details by ID, and create or update Okta application records. |
| Okta logs management AI agent | Automates log management-related workflows in Okta from Integration Hub. Automate actions such as 'Look up Okta Logs Stream’. |
There might be AI agents installed with the Now Assist application that are not used in agentic workflows. To learn how to see all agents that are available to you, see Find AI agents.
Note: Ensure that the user running an AI agent has the required roles and permissions to access data or perform operations on data in the table that is associated with the AI agent.
Okta account requirements
The Okta spoke requires generating and configuring your Okta account to use a web API key.
Credential and connection alias requirements
Integration Hub uses aliases to manage connection and credential information. Using an alias eliminates the need to configure multiple credentials and connection information profiles when using multiple environments. If the connection or credential information changes, you don't need to update any actions that use the connection. For more information, see Connections and Credentials.
This spoke uses the Okta Connection & Credential Alias record to authorize actions. For information about setting up the spoke, see Set up Okta spoke.
MID Server requirements
These actions use REST calls that can run either on an instance or, optionally, through a MID Server. Use the connection record associated with the Okta alias to configure where actions run and, if needed, specify MID Server selection attributes. For more information, see MID server.
To set up the MID Server for this spoke, see Set up MID Server for a spoke.