---
sourceDocument: Zurich Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/integrate-applications
Release :
- zurich
ft:locale :
- en-US
ft:publication_title :
- Zurich Workflow Data Fabric
ft:clusterId :
- crint
bundleId :
- crint
workflow :
- Creator
---
# Okta Spoke
# Okta Spoke {#ariaid-title1}
Release version: Zurich
Updated July 2, 2026
 12 minutes to read
Use Okta to manage users, passwords, and groups.
## Request apps on the Store {#okta-v2-spoke__section_ktg_4vb_x3b}
Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#okta-v2-spoke__inline-send-to-store}
## Integration Hub subscription {#okta-v2-spoke__section_rsf_yvb_l3b}
This spoke requires an Integration Hub subscription. For more information, see [Legal schedules - IntegrationHub overview](https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/legal/snc-addendum-integrationhub.pdf).
## Spoke version {#okta-v2-spoke__section_etw_ncx_bsb}
Okta spoke v4.8.3 is the latest version.{#okta-v2-spoke__okta-ver}
## Spoke dependencies {#okta-v2-spoke__section_h4k_ml1_3lb}
If you're having trouble installing the app, ensure that these
dependent plugins are installed:
* ServiceNow IntegrationHub Action Template - Data Stream (com.glide.hub.action_type.datastream)
* ServiceNow IntegrationHub Action Step - REST (com.glide.hub.action_step.rest)
* ServiceNow IntegrationHub Runtime (com.glide.hub.integration.runtime)
* ServiceNow Flow Designer - Dynamic Inputs (com.glide.hub.dynamic_inputs)
* ServiceNow IntegrationHub Action Step - REST (com.glide.hub.action_step.rest)
* com.glide.cobject:sys,com.glide.script.vtable
* com.snc.remote_directory_sync
* XML Parser for ServiceNow IntegrationHub (com.glide.hub.action_step.xmlparser)
* Flow Designer Model (com.glide.hub.designer_backend.model)
* Complex Object (com.glide.cobject)
{#okta-v2-spoke__ul_xpv_nfj_flb}
Note:
Some of these plugins are licensable features and require an appropriate license if used outside the spoke implementation. For information on licenses, contact your account manager.
## Supported versions {#okta-v2-spoke__section_ndj_n34_zgb}
API version v1.
## Spoke flows {#okta-v2-spoke__section_uln_xj4_3fb}
The Okta spoke provides sample flows in the draft state to demonstrate automating user and group management tasks. To customize a sample flow, copy it to a new application scope.
Available sample flows include:
{#okta-v2-spoke__table_a5r_bk4_3fb__entry__2}
| Flow | Description |
|-|-|
| Add User to Okta Group | When a user is created, it adds the user to the specified group. |
| Onboard User in Okta | When a user is created in ServiceNow, creates and activates the user in Okta. |
| Remove Okta Group Membership on Deactivation | When a user is deactivated, it removes the user from all Okta groups. |
[ ]
{#okta-v2-spoke__table_a5r_bk4_3fb}
Note:
Okta has the ServiceNow_UD application to provision users in ServiceNow. ServiceNow can also be configured to provision users at Okta. Therefore, ServiceNow administrators must confirm that circular user creation doesn't occur.
## Spoke subflows {#okta-v2-spoke__section_l2k_tws_mpb}
The Okta spoke provides sample subflows to demonstrate automating Okta tasks. Available subflows are:{#okta-v2-spoke__table_ed3_sxs_mpb__entry__3}
| Subflow category | Subflow | Description |
|-|-|-|
| Webhook management | Check Activate Application Event Hook | Verifies if an event hook for the application-lifecycle-activate exists in Okta. |
| Webhook management | Inbound Integration from Okta to ServiceNow | Allows inbound integration from Okta to a ServiceNow instance. Verifies if an event hook exists for an application. If the event hook doesn't exist, a new event hook is created. Note: Make sure that Configuration URI field value is in this format: https://<instance-name>.service-now.com/api/sn_okta_spoke/oktawebhook |
| Group Management | Get Groups | Updates an existing group or creates a group at Okta. |
| Application Management | Create or Update Okta Applications Record | Creates an Okta application record or updates an existing Okta application record. |
[ ]
{#okta-v2-spoke__table_ed3_sxs_mpb}
## Available sample conversational subflows {#okta-v2-spoke__section_n3v_cfm_zfc}
Install Now Assist for Conversational Spokes and start using the conversational ability of Integration Hub spokes. For more information, see [Now Assist in Conversational Spokes](https://www.servicenow.com/docs/tAjOwZh3N1k3U3O2KH1EHQ "Use Now Assist in Conversational Spokes application to start utilizing the conversational ability of Integration Hub spoke actions.").
{#okta-v2-spoke__table_mwm_hfm_zfc__entry__2}
| Conversational subflow | Description |
|-|-|
| Expire User Password - Sample | Expires the user's password in Okta. |
| Reset to Temporary Password - Sample | Resets the user's password in Okta to a temporary password. |
| Look up Group Details - Sample | Retrieves details of the required group in Okta. |
| Look up User Profile - Sample | Retrieves details of the required user profile in Okta. |
| Add User to Group - Sample | Adds user to the required group. |
| Look up Group Members - Sample | Retrieves details of users in the required group in Okta. |
| Is User in Group - Sample | Specifies if the user is a member of the provided group. |
| Look up Users by Application - Sample | Retrieves details of users that have access to the specific application. |
[Table 1. Sample conversational subflows]
{#okta-v2-spoke__table_mwm_hfm_zfc}
## Spoke modules {#okta-v2-spoke__section_ilj_fmz_mpb}
The Okta spoke adds the Okta application to your ServiceNow instance and includes these modules:{#okta-v2-spoke__table_hpp_vmz_mpb__entry__2}
| Module | Description |
|-|-|
| Okta Applications | Shows the list of applications. Click New to create an application record. |
| Okta groups | Shows the list of user groups at Okta. Click Fetch Okta Groups to retrieve details of the Okta groups. For more information, see [Fetch Okta groups](https://www.servicenow.com/docs/jhVAtAtZLP3O2UFchUi0Kw "Fetch Okta groups into your instance so that you can assign them to different users. You can fetch the groups on an as-needed or scheduled basis."). |
| Okta Users | Shows the list of users at Okta. This is a remote table. When you click the Okta Users module, Okta Users \[sn_okta_spoke_users\] remote table definition is triggered and user details are cached in memory. For more information about the remote tables, see [Remote tables](https://www.servicenow.com/docs/access?context=remote-tables&version=zurich&pubname=zurich-servicenow-platform&ft:locale=en-US). You can modify script definition of the Okta Users \[sn_okta_spoke_users\] remote table definition as per your requirement. |
| Okta Webhook Registry | Shows the list of webhook registries. Click New to create a webhook registry. For more information, see[Set up a bi-directional webhook for Okta spoke](https://www.servicenow.com/docs/kfIAkS7ShskajT1amW8kUw#setup-webhook-okta "Configure a webhook to subscribe to Okta with a ServiceNow callback URL."). |
[ ]
{#okta-v2-spoke__table_hpp_vmz_mpb}
## Spoke actions {#okta-v2-spoke__section_tw3_s34_3fb}
The Okta spoke provides actions to authenticate and manage users and groups. Available actions include:
{#okta-v2-spoke__table_p2h_x34_3fb__entry__3}
| Category | Action | Description |
|-|-|-|
| User Management | Activate User | Starts the process of activating a user at Okta by enabling new or returning users to configure their Okta account from an activation URL. This action can either have Okta send the activation URL to the user as an email, or it can return the activation URL as a data pill for use in a later action to send an email or notification. |
| User Management | Clear User Session | Clears all active sessions you have with Okta, which forces the user to log back in the next time they use Okta. |
| User Management | Create User | Creates the specified user at Okta with the specified standard, optional, and mandatory field values. Note: Okta has the ServiceNow_UD application to provision users in ServiceNow. ServiceNow can also be configured to provision users at Okta. Therefore, ServiceNow administrators must confirm that circular user creation doesn't occur. |
| User Management | Deactivate User | Deactivates the specified user at Okta, which removes the user's groups and application assignments, and changes the user status to DEACTIVATED. This action is commonly used when a user departs the company indefinitely. Note: Don't perform this action on users with a DEPROVISIONED status. |
| User Management | Delete User | Deletes the specified user within Okta, which completely removes the user. This action is commonly used to clean up your user base after compliance regulations have been met. |
| User Management | Is User Account Locked | Determines if a user account is locked. |
| User Management | Lookup Okta User ID | Retrieves the Okta user ID for the specified Okta login ID or login short name. |
| User Management | Lookup User Account Details by User ID | Retrieves user details for the specified Okta user ID. |
| User Management | Lookup User Profile by User ID | Retrieves user profile details for the specified Okta user ID. |
| User Management | Restart User Activation | Restarts the specified user's activation within Okta. Use this action if the user didn't complete their activation with the activation code or link provided by the Activate User Action. |
| User Management | Suspend User | Suspends the specified user within Okta by changing the user status from ACTIVE to SUSPENDED. For example, use this action to suspend access for users who are on temporary leave. To reactivate a suspended user, use the Unsuspend action. |
| User Management | Unsuspend User | Unsuspends the specified user at Okta. |
| User Management | Update User Profile | Updates the user profile details for the specified user at Okta. |
| User Management | Look up Users Stream | Retrieves users from Okta based on the filter value. |
| Password Management | Change User's Password | Changes the specified user's password after validating the user's current password. |
| Password Management | Expire User Password | Expires the specified user's password within Okta. This action is commonly used as a reaction to stop breaching attempts. |
| Password Management | Reset to Temporary Password | Resets the specified user's password within Okta to a temporary password. This action is commonly used to get a user logged in who has forgotten their password. |
| Password Management | Reset User Factors | Resets all of the multi-factor access devices for the specified user within Okta. This action is commonly used when a user loses their multi-factor authentication device or method. |
| Password Management | Set User Password | Sets the specified user's password in Okta. |
| Password Management | Unlock User | Unlocks the specified user in Okta. |
| Group Management | Add User To Group | Adds the specified user to the specified group in Okta. |
| Group Management | Create Group | Creates the specified group in Okta. |
| Group Management | Get Groups | Retrieves all new and updated groups in Okta. |
| Group Management | Is User In Group | Determines if the specified user is a member of the specified group in Okta. |
| Group Management | Lookup Group Details by Group ID | Retrieves group details for the specified Okta group ID. |
| Group Management | Lookup Group ID By Name | Retrieves group details and group ID for the specified Okta group name. |
| Group Management | Remove User From Group | Removes the specified user from the specified Okta group ID. |
| Group Management | Update Group | Updates the group details for the specified Okta group ID. |
| Group Management | Look up Groups Stream | Retrieves groups from Okta, based on the filter criteria. |
| Group Membership Management | Look up Group Members Stream | Retrieves users from the specified Okta group. |
| Group Membership Management | Look up User Groups Stream | Retrieves the group information from Okta to which the user belongs to. |
| Application Access Management | Look up Users by Application ID Stream | Retrieves users who have access to the specified application. |
| Application Access Management | Look up Groups by Application ID Stream | Retrieves groups who have access to the specified application. |
| Application Access Management | Revoke User Application Access | Revokes access to an application for the required user. |
| Application Management | Look up Applications Stream | Retrieves applications from Okta, based on the filter criteria. For more information about the criteria you can specify in the Filter input, see [List applications](https://developer.okta.com/docs/reference/api/apps/#list-applications) in [Okta Developer Documentation](https://developer.okta.com/docs/). |
| Application Management | Look up Application by Application ID | Retrieves details of the specified application ID in Okta. |
| Application Management | Look up App Launcher Applications Stream | Retrieves applications that are either active or are assigned to users. |
| Logs Management | Look up Okta Logs Stream | Retrieves the logs in Okta that are filtered by the given filter value and within the specified time duration. For more information about the event types and system logs, see [Event Types](https://developer.okta.com/docs/reference/api/system-log/#event-types) in [Okta Developer Documentation](https://developer.okta.com/docs/). |
| Metadata Retrieval | Look up Additional Fields for User | Retrieves the metadata of the additional fields for a user in Okta. |
| Metadata Retrieval | Look up Applications Metadata | Retrieves the metadata of applications in Okta. |
| Metadata Retrieval | Look up Event Hooks Metadata | Retrieves the metadata of the event hooks in Okta. Note: Make sure that you use this action along with the actions that use Event Hook ID as a dynamic input. |
| Metadata Retrieval | Look up Groups Metadata | Retrieves the metadata details of the groups in Okta. |
| Webhook Management | Activate Event Hook | Changes the status of the specified event hook to active in Okta. |
| Webhook Management | Create Event Hook | Creates an active event hook in Okta. Note: Make sure that Configuration URI field value is in this format: https://<instance-name>.service-now.com/api/sn_okta_spoke/oktawebhook |
| Webhook Management | Deactivate Event Hook | Sets the status of the specified Okta event hook to inactive. |
| Webhook Management | Look up Event Hook by ID | Retrieves details of the Okta event hook for the specified ID. |
| Webhook Management | Look up Event Hooks | Retrieves details of all the event hooks in Okta. |
| Webhook Management | Update Event Hook | Updates the specified event hook in Okta. Note: Make sure that Configuration URI field value is in this format: https://<instance-name>.service-now.com/api/sn_okta_spoke/oktawebhook |
| Webhook Management | Verify Event Hook | Verifies and retrieves an external service endpoint configured for an event hook in Okta. |
[ ]
{#okta-v2-spoke__table_p2h_x34_3fb}
## Available conversational actions {#okta-v2-spoke__section_xjz_55l_zfc}
Install Now Assist for Conversational Spokes and start using the conversational ability of Integration Hub spokes. For more information, see [Now Assist in Conversational Spokes](https://www.servicenow.com/docs/tAjOwZh3N1k3U3O2KH1EHQ "Use Now Assist in Conversational Spokes application to start utilizing the conversational ability of Integration Hub spoke actions.").
Available conversation action is Create Group that creates a group in Okta with the provided details.
## Available AI agents {#okta-v2-spoke__section_wqm_l1y_n2c}
Install Now Assist for Integration Hub and start using the available AI agents. For more information, see [Now Assist for Integration Hub](https://www.servicenow.com/docs/viy2Rs8UxQxzXVqad8moQg "Use the ServiceNow Now Assist AI agents to mimic human-like intelligence by using Large Language Models (LLMs) to perform tasks that range from simple automated responses to complex problem-solving. Utilize the conversational ability of Integration Hub spoke actions.").
This spoke provides standalone AI agents that mimic human-like intelligence to perform tasks in your ServiceNow instance.
* In the ServiceNow agentic system, you can create an agentic workflow that comprises of a set of large language model (LLM) instructions along with one or more standalone AI agents to execute an objective. See [Create an agentic workflow](https://www.servicenow.com/docs/access?context=configure-use-case-ai-agents&version=zurich&pubname=zurich-intelligent-experiences&ft:locale=en-US) for information about adding AI agents to create agentic workflows as per your requirement and provide the required trigger.
You can also search for other
available AI agents and add them to your agentic workflow. See [Find AI agents](https://www.servicenow.com/docs/access?context=find-ai-agents&version=zurich&pubname=zurich-intelligent-experiences&ft:locale=en-US) for more information.
* You can create a clone of the required spoke AI agent and customize it as per your requirement. See [Duplicate an AI agent](https://www.servicenow.com/docs/access?context=clone-ai-agent&version=zurich&pubname=zurich-intelligent-experiences&ft:locale=en-US) for more information about creating a clone.
* See [AI Agent Studio](https://www.servicenow.com/docs/access?context=na-ai-agents&version=zurich&pubname=zurich-intelligent-experiences&ft:locale=en-US) for information about AI agents.
{#okta-v2-spoke__ul_tjz_vtr_m2c}
Available AI agents include:{#okta-v2-spoke__table_gtm_w1y_n2c__entry__2}
| AI Agent | Description |
|-|-|
| Okta group management AI agent | Automates group-related tasks in Okta using Integration Hub such as those related to managing of groups, handling user memberships, and retrieving group details. |
| Okta password management AI agent | Automates password-related workflows in Okta from Integration Hub. Automate actions such as reset password to temporary values, set new password, expire passwords, unlock user accounts, reset user authentication factors, and change user passwords. |
| Okta group membership management AI agent | Automates group-related workflows in Okta from Integration Hub. Automate actions such as Look up User Groups Stream', and 'Look up Group Members Stream'. |
| Okta user management AI agent | Automates user management workflows in Okta from Integration Hub. Automate actions such as manage user accounts, sessions, and statuses. |
| Okta application access management AI agent | Automates access management workflows in Okta from Integration Hub. Automate actions such as look up users and groups by application ID stream, and revoking user application access. |
| Okta application management AI agent | Automates application management-related workflows in Okta from Integration Hub. Automate actions such as look up applications, retrieve application details by ID, and create or update Okta application records. |
| Okta logs management AI agent | Automates log management-related workflows in Okta from Integration Hub. Automate actions such as 'Look up Okta Logs Stream'. |
[ ]
{#okta-v2-spoke__table_gtm_w1y_n2c}
There might be AI agents installed on your instance that are not used in agentic workflows. To learn how to see all agents that are available to you, see [Find AI agents](https://www.servicenow.com/docs/access?context=find-ai-agents&version=zurich&pubname=zurich-intelligent-experiences&ft:locale=en-US).
Note:
Ensure that the user running an AI agent has the required roles and permissions to access data or perform operations on data in the table that is associated with the AI agent.
## Okta account requirements {#okta-v2-spoke__section_dmr_gk4_3fb}
The Okta spoke requires generating and configuring your Okta account to use a web API key.
## Credential and connection alias requirements {#okta-v2-spoke__section_nrv_nk4_3fb}
Integration Hub uses aliases to manage connection
and credential information. Using an alias eliminates the need to configure multiple
credentials and connection information profiles when using multiple environments. If the
connection or credential information changes, you don't need to update any actions that
use the connection. For more information, see [Connections and Credentials](https://www.servicenow.com/docs/access?context=r-credentials&version=zurich&pubname=zurich-platform-security&ft:locale=en-US).
This spoke uses the Okta Connection \& Credential Alias record to authorize actions. For information about setting up the spoke, see
[Set up Okta spoke](https://www.servicenow.com/docs/UsK_YQ7iiBFNRapBbnTp_w#set-up-okta-v1.1.1 "Integrate the Okta spoke with Okta to automate various actions on Okta. For example, you can automate the activation of a user on Okta. To integrate, connect your ServiceNow instance and Okta using an API key or OAuth authentication.").
## MID Server requirements {#okta-v2-spoke__section_gyl_bwj_vdb}
These actions use REST calls that can run either on an instance or, optionally, through a MID Server. Use the connection record associated with the Okta alias to configure where actions run and, if needed, specify MID Server selection attributes. For more information, see [MID server](https://www.servicenow.com/docs/access?context=mid-server-landing&version=zurich&pubname=zurich-servicenow-platform&ft:locale=en-US).
To set up the MID Server for this spoke, see [Set up MID Server for a spoke](https://www.servicenow.com/docs/vBsVe9yQMxv2CGOFt_dQ4Q "Configure MID Server settings on your ServiceNow instance that enables it to integrate with a third-party application via MID Server after you have set up the connection record for a spoke.").