Okta connector

Beta

This feature is in Beta. To use it, a workspace admin must turn on Lakeflow Connect for Okta from the Previews page. See Manage Databricks previews.

The managed Okta connector in Lakeflow Connect ingests identity and access data from your Okta organization into Databricks. This data includes users, groups, group memberships, app integrations and their assignments, devices, policies, authenticators, and administrator roles.

The connector uses the Okta Management API. To ingest Okta System Log events, use the Okta System Logs connector.

Feature availability

Feature	Availability
UI-based pipeline authoring	Supported
API-based pipeline authoring	Supported
Declarative Automation Bundles	Supported
Incremental ingestion	Supported
Unity Catalog governance	Supported
Orchestration using Lakeflow Jobs	Supported
API-based column selection and deselection	Supported
API-based row filtering	Not supported
Slowly changing dimensions (SCD) type 2	Not supported
Automated schema evolution: New and deleted columns	Supported
Automated schema evolution: Data type changes	Not supported
Automated schema evolution: Column renames	Not supported Requires a full refresh.

Feature	Availability
UI-based pipeline authoring	Supported
API-based pipeline authoring	Supported
Declarative Automation Bundles	Supported
Incremental ingestion	Supported
Unity Catalog governance	Supported
Orchestration using Lakeflow Jobs	Supported
API-based column selection and deselection	Supported
API-based row filtering	Not supported
Slowly changing dimensions (SCD) type 2	Not supported
Automated schema evolution: New and deleted columns	Supported
Automated schema evolution: Data type changes	Not supported
Automated schema evolution: Column renames	Not supported Requires a full refresh.

Authentication methods

Authentication method	Availability
OAuth user-to-machine (U2M)	Not supported
OAuth machine-to-machine (M2M)	Not supported
Basic authentication (username/password)	Not supported
SSWS API token	Supported An Okta API token that authenticates with the SSWS authorization scheme.

Authentication method	Availability
OAuth user-to-machine (U2M)	Not supported
OAuth machine-to-machine (M2M)	Not supported
Basic authentication (username/password)	Not supported
SSWS API token	Supported An Okta API token that authenticates with the SSWS authorization scheme.

Ingest from Okta in 3 steps

note

Before starting, review the Databricks user persona, supported interfaces, ingestion frequency, and common patterns.

1. Configure Okta for ingestion (Admins): Create an Okta API token for Databricks to authenticate with.
2. Create a Unity Catalog connection (Admins): Create a connection in Catalog Explorer to store credentials for Databricks to authenticate with Okta.
3. Create an ingestion pipeline (Admins or non-admins): Select any supported interface and create a pipeline from an existing connection.