Integrating an Account with Okta

It's possible to sync Okta groups into PhishingBox as target groups. Follow the steps below to configure an Okta integration on PhishingBox: 

1. Log into Okta and make a note of the Okta domain (this can be found in the global header located in the upper-right corner of the dashboard).
2. Generate an API token by navigating to Security > API > Tokens and click the "Create token" button.
      
   

   NOTE: The token owner must have one or more of the following admin roles assigned: Group Membership Administrator, API Access Management Admin, Report Admin, Help Desk Admin, Read-only admin, App Admin, Group Admin, Org Admin, and/or Super Admin. 

3. Input an appropriate token name and click "Create Token". A pop-up will appear with a token value. Click the clipboard icon to copy this value.

   NOTE: This will be the only time you can access this token value, copy and save it in a secure location.

   
   
4. Log into PhishingBox and navigate to Administration > Integration Store and click the “Setup” button on the Okta card.
5. Set "Active" to "Yes".
6. Input the “Okta Domain” and the “Api Token” in the respective fields
7. Click “Test”.
8. If the test succeeds you will be presented with a list of the groups from your Okta tenant. If you have a large amount of groups, you will have to search for the groups you want to sync.
9. Select the groups you would like to sync and click “Save”.
        

The groups you have selected to sync will enter the queue. It may take several minutes to sync, depending on the number of targets and/or groups.

NOTE: Users that are in a "Deactivated" state will not be synced in. Users that are in any other state (active or suspended, for example) will be pulled into PhishingBox.