{
  "slug": "okta",
  "name": "Okta",
  "description": "Monitor Okta identity management including user MFA enrollment, access controls, and group-based role assignments",
  "category": "Identity & Access",
  "docsUrl": "https://developer.okta.com/docs/api/",
  "baseUrl": "https://placeholder.okta.com",
  "authConfig": {
    "type": "custom",
    "config": {
      "setupInstructions": "1. Log in to your Okta Admin Console (https://YOUR_DOMAIN-admin.okta.com).\n2. Go to Security > API > Tokens.\n3. Click 'Create Token', give it a name (e.g. 'Comp AI'), and copy the token value.\n4. Enter your Okta domain (e.g. company.okta.com) and the API token below.",
      "credentialFields": [
        {
          "label": "Okta Domain",
          "type": "text",
          "required": true,
          "helpText": "Your Okta organization domain, e.g. company.okta.com (without https://)"
        },
        {
          "label": "API Token",
          "type": "password",
          "required": true,
          "helpText": "Found in Okta Admin Console > Security > API > Tokens > Create Token. Requires Super Admin or Org Admin role."
        }
      ]
    }
  },
  "capabilities": [
    "checks"
  ],
  "supportsMultipleConnections": false,
  "syncSupported": false,
  "checks": [
    {
      "slug": "mfa_enrollment",
      "name": "2FA",
      "description": "Verifies that active Okta users have MFA factors enrolled",
      "defaultSeverity": "high",
      "enabled": true
    },
    {
      "slug": "employee_access",
      "name": "Employee Access",
      "description": "Reviews all Okta users and flags inactive or suspended accounts that should be removed",
      "defaultSeverity": "medium",
      "enabled": true
    },
    {
      "slug": "role_based_access",
      "name": "Role-based Access Controls",
      "description": "Verifies that Okta groups are configured for role-based access management",
      "defaultSeverity": "medium",
      "enabled": true
    },
    {
      "slug": "okta_password_policy",
      "name": "Password Policy",
      "description": "Verifies that Okta password policies meet security requirements for length, complexity, and account lockout",
      "defaultSeverity": "high",
      "enabled": true
    },
    {
      "slug": "okta_admin_audit",
      "name": "Admin Role Audit",
      "description": "Lists users with admin roles assigned and flags excessive admin privilege concentration",
      "defaultSeverity": "medium",
      "enabled": true
    }
  ],
  "checkCount": 5,
  "isActive": true
}