Update the Extended account access settings for Okta

This article describes how to update the settings of the Extended account access feature for Okta.

Who can use this feature?

• WorkspaceOwners , Super Admins , and Admins

• Supported using the Cerby web app

As a workspace Admin , Super Admin , or Owner , you can update the settings of the Extended account access feature for Okta. With this feature, you and all workspace members can sync and extend the accounts they own to access them from their Okta dashboard powered by Cerby’s automated login.

You may want to update these settings if the domain of your Okta instance changes or the Okta API token expires. Cerby will display the Update status in your workspace settings to indicate when the token is no longer valid to perform syncs.

Requirements

The following are the requirements to update the Extended account access settings:

• A user account in Okta with the following roles:

  • Application Administrator to create and manage app integrations in your Okta tenant

  • Read-only Administrator to read Okta groups

• A user account in Cerby with the workspace Admin , Super Admin , or Owner role

• A new API token from Okta created for this purpose. For instructions on how to create or retrieve the token, read the official documentation Manage Okta API tokens Additionally, set the corresponding rate limits for the following API endpoint:

• /api/v1/apps*

Update the Extended account access settings for Okta

To update the Extended account access settings for Okta, you must complete the following steps:

1. Log in to your Cerby workspace using your web browser.

2. Select the Settings option from the left navigation drawer. The Workspace Configuration page is displayed.

3. Activate the IDP Settings tab. TheIdentity Provider Settings section is displayed. The fields related to the Extended account access feature are IDP Domain and API Token.

4. Click the More options() icon of the field you want to update. A drop-down list is displayed.

5. Select the Edit option from the list.

6. Confirm your identity according to your multi-factor authentication (MFA) method:

   • Push notification on the Cerby mobile app

   • Email magic link

The input field is enabled in editing mode.

1. Enter the new value in the corresponding input field:

   • IDP Domain: It is the domain of the Okta tenant configured for your Cerby workspace.

   IMPORTANT: You must include the protocol part (https://) of the URL. For example, https://mycompany.okta.com.

• API Token: It is the token that you generated or retrieved previously as part of the Requirements section. For instructions, read the official documentation Manage Okta API tokens.

TIP: Click the Test connection button for the API Token field to verify Cerby can connect with Okta with the new token.

1. Click the Done () icon. A success message box is displayed.

Now you are done. You and all workspace members can continue syncing their extended accounts with Okta.