App Inventory

Fetches application data from Okta for continuous visibility into app provisioning and access control.

Sync Type: Full Synchronisation

Authentication

This input supports API Key and OAuth 2.0 (service app) authentication. See Okta Authentication for setup instructions and required credentials for each method.

Details

Monad uses the cron field to run this input on specific intervals and returns all applications' details, performing a full sync of data each time.

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Secrets

Secrets vary by authentication method. See Okta Authentication for details. If using the Oauth flow, the token should be granted the okta.apps.read scope.

Sample Record

Code
{
  "id": "0oa1gjh63g214q0Hq0g4",
  "name": "testorgone_customsaml20app_1",
  "label": "Custom Saml 2.0 App",
  "status": "ACTIVE",
  "lastUpdated": "2025-08-11T23:46:51.84619Z",
  "created": "2025-08-11T23:46:51.846195Z",
  "accessibility": {
    "selfService": false,
    "errorRedirectUrl": null,
    "loginRedirectUrl": null
  },
  "visibility": {
    "autoSubmitToolbar": false,
    "hide": {
      "iOS": false,
      "web": false
    },
    "appLinks": {
      "testorgone_customsaml20app_1_link": true
    }
  },
  "features": [],
  "signOnMode": "SAML_2_0",
  "credentials": {
    "userNameTemplate": {
      "template": "${fn:substringBefore(source.login, \"@\")}",
      "type": "BUILT_IN"
    },
    "signing": {}
  },
  "settings": {
    "app": {},
    "notifications": {
      "vpn": {
        "network": {
          "connection": "DISABLED",
          "message": null,
          "helpUrl": null
        }
      }
    },
    "signOn": {
      "defaultRelayState": "",
      "ssoAcsUrl": "https://{yourOktaDomain}",
      "idpIssuer": "http://www.okta.com/${org.externalKey}",
      "audience": "https://example.com/tenant/123",
      "recipient": "http://recipient.okta.com",
      "destination": "http://destination.okta.com",
      "subjectNameIdTemplate": "${user.userName}",
      "subjectNameIdFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
      "responseSigned": true,
      "assertionSigned": true,
      "signatureAlgorithm": "RSA_SHA256",
      "digestAlgorithm": "SHA1",
      "honorForceAuthn": true,
      "authnContextClassRef": "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport",
      "slo": {
        "enabled": true,
        "spIssuer": "https://testorgone.okta.com",
        "logoutUrl": "https://testorgone.okta.com/logout"
      },
      "participateSlo": {
        "enabled": true,
        "logoutRequestUrl": "https://testorgone.okta.com/logout/participate",
        "sessionIndexRequired": true,
        "bindingType": "REDIRECT"
      },
      "spCertificate": {
        "x5c": [
          "MIIFnDCCA4QCCQDBSLbiON2T1zWEIUOFGIHD2EOWQIPHFU1haW5lMRAwDgYDVQQQE'F0PHIJWE'AISBCNKWEluYzEUMBIGA1UECwwLRW5EQILFYVKSBCIEDWUKVBCG;IUWE;KSAVBCD..."
        ]
      }
    }
  }
}

Sync frequency

This input runs on a cron schedule (default hourly, 0 * * * *), which you can configure on the pipeline. See Input Sync Frequency for details.