Okta
Users, groups and MFA evidence for access controls. Prerequisites, setup steps and troubleshooting.
What it does
Okta gives cSquare the live user, group and MFA picture behind your access-control controls. Joiners and leavers show up without an export.
Prerequisites
- A cSquare GRC workspace where you are an owner or admin.
- Connection method: API key or token.
- Access needed at Okta: Read-only administrator.
Set up
Open Settings > Integrations in the app, find Okta, then:
- In the Okta admin console go to Security, then API, then Tokens.
- Create a token as a read-only administrator and copy it immediately; Okta shows it once.
- Enter your Okta domain (for example acme.okta.com) and the token here.
Verify the connection
- Back in Settings > Integrations, Okta should show Connected with a recent sync time.
- Open Evidence and filter by source Okta. The first sync can take a few minutes.
- Open a control that depends on Okta and confirm the new evidence is linked.
AI prompts
Paste these into Fibo in the app, or into any assistant connected through MCP.
I just connected Okta to cSquare GRC. Check that it is syncing, list the evidence it has collected so far, and tell me which controls in my active programs now have evidence from Okta.
Which controls in my programs could be covered by Okta evidence but still have no current evidence? Group them by framework and suggest what to collect.
Troubleshooting
401 Invalid token
Okta tokens expire after 30 days of no use. Create a new token and re-enter it.
Domain not found
Use the bare domain without https:// and without a trailing slash.
Test connection fails immediately
Nine times out of ten the credential was pasted with a trailing space, or it was issued in a different tenant or region. Re-copy it and try again.
The connector is quarantined
Collection paused after three consecutive failures. Fix the credential, then use Re-test and re-enable on the Active connections tab; it only resumes when the test passes.
Connected, but no evidence appears
Check that at least one collection type is selected and that the account can see the resources. Read-only accounts scoped to a single project will only return that project.
Still stuck?
My Okta connector in cSquare GRC is failing. Here is the error I see: <paste error>. Walk me through the likely causes and the exact fix, step by step.