Okta

已上线身份与访问

Okta 连接器——只读、无代理

Scans Okta users, application assignments, and group memberships to map who can sign in to which application.

我们扫描的内容

User inventory, application assignments, and group memberships (never credentials)
Sign-on and access relationships

只读监控——除非您开启自动修复并单独授予写入权限，否则您的 Okta 数据中的任何内容都不会发生变更。

• Okta administrator who can create an API token (Read-Only Administrator is sufficient and recommended)
• A read-only Okta API token (Security → API → Tokens) and your Okta org URL

首次扫描通常耗时：1–4 minutes

okta.users.readList users and their status, last-login, enrolled MFA factors, and admin roles — to find accounts without MFA, admin sprawl, and dormant or deactivated users that still hold access.
okta.groups.readList groups and the built-in "Everyone" group to expand group-based app access.
okta.apps.readList app integrations and per-app user/group assignments — who can sign into which application (the core IdP governance surface), including AI / OAuth apps and their scopes.
okta.policies.readRead password, sign-on, and session policy to check minimum standards (password strength, admin MFA, session lifetime).
okta.logs.readRead a bounded slice of the System Log to flag suspicious events (repeated failed logins, new admin grants, new app additions) and detect zombie apps with no recent sign-in.

每次 Okta 扫描会运行 11 条检测规则。每条发现都附带通俗易懂的说明、支撑证据以及修复步骤。

几分钟内接入您的第一个数据源——免费、只读，无需销售沟通。