# Identity Groups

Retrieves group data from Okta for identity and access management monitoring.

**Sync Type: Full Synchronisation**

## Authentication

This input supports API Key and OAuth 2.0 (service app) authentication. See [Okta Authentication](./okta-auth) for setup instructions and required credentials for each method.
## Details
Monad uses the `cron` field to run this input on specific intervals and returns all groups' details, performing a full sync of data each time.

## Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

#### Settings

| Setting | Type | Required | Description |
|---------|------|----------|-------------|
| Org URL | string | Yes | Your Okta Organization URL. |
| Cron | string | Yes | A cron expression defining how often to fetch user data. |
| API Rate Limit | object | No | Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See [API Rate Limiting](../../../guides/rate-limiting) for the field format, limits, and how to choose a value. |

#### Secrets

Secrets vary by authentication method. See [Okta Authentication](./okta-auth) for details. If using the Oauth flow, the token should be granted the ```okta.groups.read``` scope.

## Custom Schema Handling

If the source data doesn't align with any of the [OpenSecurityControlFramework (OSCF) schemas](https://schema.ocsf.io/), you can create a custom transformation using our JQ transform pipeline. For example:

```jq
{
  metadata: {
    schema_version: "1.0.0",
    custom_framework: "my_framework"
  },
  controls: .[]
}
```

For more information on JQ and how to write your own JQ transformations see the JQ docs [here](https://jqlang.github.io/jq/).

If you believe this data source should be included in the standard OSCF schema set, please reach out to our team at [support@monad.com](mailto:support@monad.com). We're always looking to expand our coverage of security control frameworks based on community needs.



## Related Articles
- [https://help.okta.com/en-us/content/topics/security/api.htm](https://help.okta.com/en-us/content/topics/security/api.htm)
- [https://developer.okta.com/docs/reference/api/groups/#list-groups](https://developer.okta.com/docs/reference/api/groups/#list-groups)
## Sample Record

```json
{
  "id": "00garwpuyxHaWOkdV0g4",
  "created": "2025-08-11T23:46:51.439029Z",
  "lastUpdated": "2025-08-11T23:46:51.439035Z",
  "lastMembershipUpdated": "2025-08-11T23:46:51.439036Z",
  "objectClass": [
    "okta:windows_security_principal"
  ],
  "type": "OKTA_GROUP",
  "profile": {
    "name": "West Coast Users",
    "description": "corp.example.com/Engineering/Engineering Users",
    "groupType": "Security",
    "samAccountName": "Engineering Users",
    "objectSid": "S-1-5-21-717838489-685202119-709183397-1177",
    "groupScope": "Global",
    "dn": "CN=Engineering Users,OU=Engineering,DC=corp,DC=example,DC=com",
    "windowsDomainQualifiedName": "CORP\\Engineering Users",
    "externalId": "OZJdWdONCU6h7WjQKp+LPA=="
  },
  "_links": {
    "logo": [
      {
        "name": "medium",
        "href": "https://{yourOktaDomain}/img/logos/groups/okta-medium.png",
        "type": "image/png"
      },
      {
        "name": "large",
        "href": "https://{yourOktaDomain}/img/logos/groups/okta-large.png",
        "type": "image/png"
      }
    ],
    "users": {
      "href": "https://{yourOktaDomain}/api/v1/groups/00garwpuyxHaWOkdV0g4/users"
    },
    "apps": {
      "href": "https://{yourOktaDomain}/api/v1/groups/00garwpuyxHaWOkdV0g4/apps"
    }
  }
}
```