Easy Learn
Token Claim Customization in Okta A friendly, ground-up guide to deciding what facts about a person travel inside a token, where those facts come from, and how to shape, limit, test, and protect them. You will learn how claims, scopes, authorization servers, and policies fit together so that every application…
Understanding Okta's Own Status & Incident Model A friendly, ground-up guide to how Okta tells its customers when something is wrong, how it describes and classifies problems, how to follow those updates, and how to prepare your own organization so that a problem at the identity provider becomes a managed…
Social Login Integration at Scale in Okta "Continue with Google" looks like one button. Behind it sit app registrations, secrets, matching rules, outages, privacy promises and millions of people. A first-principles guide to running social sign-in for a large audience with Okta, from the first button to the busiest night…
Segregation of Duties (SoD) in Okta A friendly, ground-up guide to making sure no single person holds powers that are dangerous together. You will learn what SoD means, how to find and rank risky combinations, where Okta can help prevent, detect, and manage them, and how to run the whole…
Progressive Profiling in Okta Nobody likes a form with twenty questions on the first day. Progressive profiling asks a few questions now and a few more later, at the moments when they make sense. A first-principles guide to collecting user information gradually, respectfully and safely with Okta. 1 · Why…
Profile Master Configuration Strategy in Okta Every fact about a person lives somewhere first. Their name, manager, job title and phone number each have one rightful source, and when two systems disagree, someone must decide who wins. A first-principles guide to choosing profile masters, setting priorities and keeping identity data…
Privileged Access Workflows in Okta A few accounts can change everything: create users, read secrets, switch off protections, reach production servers. Those accounts deserve a different kind of care than ordinary access. A first-principles guide to designing request, approval, time-limit, session and review workflows for privileged access with Okta. 1…
The Okta Terraform Provider A plain-English guide to managing your Okta configuration as code: what the provider is, how Terraform plans and applies changes, how to authenticate safely, what to manage and what to leave alone, how to adopt it on an existing organization, and how to review, test, secure,…
Risk-Based Authentication Scoring in Okta A plain-English guide to how a sign-in can be judged by its surroundings: what clues Okta looks at, how those clues add up to a level of risk, how policies turn that level into a decision, and how to tune the whole thing so it…
Policy Inheritance & Evaluation Order in Okta A friendly, ground-up guide to how Okta decides which policy and which rule applies to a sign-in. You will learn the first-match model, how priority order, groups, default policies, and catch-all rules really work, and how to design and test policies so that…