Identity Groups

Retrieves group data from Okta for identity and access management monitoring.

Sync Type: Full Synchronisation

Authentication

This input supports API Key and OAuth 2.0 (service app) authentication. See Okta Authentication for setup instructions and required credentials for each method.

Details

Monad uses the cron field to run this input on specific intervals and returns all groups' details, performing a full sync of data each time.

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Setting	Type	Required	Description
Org URL	string	Yes	Your Okta Organization URL.
Cron	string	Yes	A cron expression defining how often to fetch user data.

Secrets

Secrets vary by authentication method. See Okta Authentication for details. If using the Oauth flow, the token should be granted the okta.groups.read scope.

Custom Schema Handling

If the source data doesn't align with any of the OpenSecurityControlFramework (OSCF) schemas, you can create a custom transformation using our JQ transform pipeline. For example:

{
  metadata: {
    schema_version: "1.0.0",
    custom_framework: "my_framework"
  },
  controls: .[]
}

For more information on JQ and how to write your own JQ transformations see the JQ docs here.

If you believe this data source should be included in the standard OSCF schema set, please reach out to our team at support@monad.com. We're always looking to expand our coverage of security control frameworks based on community needs.

Related Articles

• https://help.okta.com/en-us/content/topics/security/api.htm
• https://developer.okta.com/docs/reference/api/groups/#list-groups

Sample Record

{
  "id": "00garwpuyxHaWOkdV0g4",
  "created": "2025-08-11T23:46:51.439029Z",
  "lastUpdated": "2025-08-11T23:46:51.439035Z",
  "lastMembershipUpdated": "2025-08-11T23:46:51.439036Z",
  "objectClass": [
    "okta:windows_security_principal"
  ],
  "type": "OKTA_GROUP",
  "profile": {
    "name": "West Coast Users",
    "description": "corp.example.com/Engineering/Engineering Users",
    "groupType": "Security",
    "samAccountName": "Engineering Users",
    "objectSid": "S-1-5-21-717838489-685202119-709183397-1177",
    "groupScope": "Global",
    "dn": "CN=Engineering Users,OU=Engineering,DC=corp,DC=example,DC=com",
    "windowsDomainQualifiedName": "CORP\\Engineering Users",
    "externalId": "OZJdWdONCU6h7WjQKp+LPA=="
  },
  "_links": {
    "logo": [
      {
        "name": "medium",
        "href": "https://{yourOktaDomain}/img/logos/groups/okta-medium.png",
        "type": "image/png"
      },
      {
        "name": "large",
        "href": "https://{yourOktaDomain}/img/logos/groups/okta-large.png",
        "type": "image/png"
      }
    ],
    "users": {
      "href": "https://{yourOktaDomain}/api/v1/groups/00garwpuyxHaWOkdV0g4/users"
    },
    "apps": {
      "href": "https://{yourOktaDomain}/api/v1/groups/00garwpuyxHaWOkdV0g4/apps"
    }
  }
}