Copy page

Okta

User Group Memberships

Fetches Okta users enriched with their group memberships. Only includes users that belong to at least one group. This input combines user data from the Okta directory with the groups each user is a member of.

Sync Type: Full Synchronisation

Authentication

This input supports API Key and OAuth 2.0 (service app) authentication. See Okta Authentication for setup instructions and required credentials for each method.

Note: When using OAuth 2.0, ensure the and okta.groups.read scopes are granted on your service app.

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Setting	Type	Required	Description
Org URL	string	Yes	Your Okta Organization URL.
Cron	string	Yes	A cron expression defining how often to fetch group membership data.

Secrets

Secrets vary by authentication method. See Okta Authentication for details.

Related Articles

• Okta API Tokenss
• Okta Groups
• Okta Users

Sample Record

Code
{
  "id": "f5c19356-b090-1832-e1be-f248b98902ae",
  "status": "ACTIVE",
  "created": "2025-08-11T23:46:51.092762Z",
  "activated": "2025-08-11T23:46:51.092768Z",
  "statusChanged": "2025-08-11T23:46:51.092769Z",
  "lastLogin": "2025-08-11T23:46:51.09277Z",
  "lastUpdated": "2025-08-11T23:46:51.092772Z",
  "passwordChanged": "2025-08-11T23:46:51.092773Z",
  "type": {
    "id": "f5c19356-b090-1832-e1be-f248b98902ae"
  },
  "profile": {
    "firstName": "John",
    "lastName": "Brown",
    "email": "john.brown@example.com",
    "login": "john.brown@example.com",
    "mobilePhone": "555-123-4567"
  },
  "credentials": {
    "password": {},
    "emails": [
      {
        "value": "john.brown@example.com",
        "status": "VERIFIED",
        "type": "PRIMARY"
      }
    ],
    "provider": {
      "type": "OKTA",
      "name": "OKTA"
    }
  },
  "groups": [
    {
      "id": "00garwpuyxHaWOkdV0g4",
      "created": "2025-08-11T23:46:51.439029Z",
      "lastUpdated": "2025-08-11T23:46:51.439035Z",
      "lastMembershipUpdated": "2025-08-11T23:46:51.439036Z",
      "objectClass": ["okta:user_group"],
      "type": "OKTA_GROUP",
      "profile": {
        "name": "Engineering",
        "description": "Engineering team members"
      },
      "_links": {
        "logo": [
          {
            "name": "medium",
            "href": "https://{yourOktaDomain}/img/logos/groups/okta-medium.png",
            "type": "image/png"
          }
        ],
        "users": {
          "href": "https://{yourOktaDomain}/api/v1/groups/00garwpuyxHaWOkdV0g4/users"
        },
        "apps": {
          "href": "https://{yourOktaDomain}/api/v1/groups/00garwpuyxHaWOkdV0g4/apps"
        }
      }
    },
    {
      "id": "00garwpuyxHaWOkdV0g5",
      "created": "2025-08-11T23:46:51.439029Z",
      "lastUpdated": "2025-08-11T23:46:51.439035Z",
      "lastMembershipUpdated": "2025-08-11T23:46:51.439036Z",
      "objectClass": ["okta:user_group"],
      "type": "OKTA_GROUP",
      "profile": {
        "name": "Security",
        "description": "Security team"
      },
      "_links": {
        "logo": [
          {
            "name": "medium",
            "href": "https://{yourOktaDomain}/img/logos/groups/okta-medium.png",
            "type": "image/png"
          }
        ],
        "users": {
          "href": "https://{yourOktaDomain}/api/v1/groups/00garwpuyxHaWOkdV0g5/users"
        }
      }
    }
  ],
  "_links": {
    "self": {
      "href": "https://{yourOktaDomain}/api/v1/users/f5c19356-b090-1832-e1be-f248b98902ae"
    }
  }
}

Sync frequency

By default this input polls approximately every 10 seconds, with each sync beginning after the previous one completes. A cron schedule configured on the pipeline overrides this cadence. See Input Sync Frequency for details.