Skip to main content

Privacera Documentation

Add Okta UserSync connector

You can use UserSync to connect to Okta for the purpose of connecting, pulling, or serving as data access users.

Add Okta UserSync connector on Privacera Platform

To add an Okta connector on Platform, follow these steps:

  1. Enable Privacera UserSync:

    cd ~/privacera/privacera-manager 
    cp config/sample-vars/vars.privacera-usersync.yml config/custom-vars/
  2. Enable the connector:

    cd ~/privacera/privacera-manager 
    cp config/sample-vars/vars.privacera-usersync.okta.yml config/custom-vars/ 
    vi config/custom-vars/vars.privacera-usersync.okta.yml
  3. Edit the following properties:

    • OKTA_CONNECTOR: The name of this connector

    • OKTA_ENABLED: The enabled status of the connector (true/false)

    • OKTA_SERVICE_URL: The Okta endpoint URL

    • OKTA_API_TOKEN: The API token for auth to OKTA API

    • OKTA_SEARCH_USER_GROUPONLY: Syncs only users that are members of groups (true/false)

    For a full list of properties, see Okta UserSync connector properties.

  4. Run the following command:

    cd ~/privacera/privacera-manager 
    ./ update

Add Okta UserSync connector on PrivaceraCloud

Prerequisite: Pull data access users and groups from . PrivaceraCloud will use protocols in client-mode to connect to an enabled SCIM-Server. It will synchronize with the targeted server to obtain data access users and groups.

To add an connector on Cloud, follow these steps:

  1. From the navigation menu, select Settings > Datasource.

  2. Choose a data source, click the dots icon, and select Add Application.

  3. From the Application List section, select USERSYNC.

  4. From the Service Type dropdown, select Okta.

  5. In the Connector Name field, enter a name for the connector.

  6. In the BASIC tab, enter Endpoint URL and Bearer Token.

  7. Click Next.

  8. Complete all BASIC values, then review and update ADVANCED values as required.

  9. Click FINISH.


When you update the UserSync configuration, you should restart it. This is to ensure that your updated configuration works properly.