what it checks
Okta checks in Varman
Verify Okta enforces MFA enrollment and a password policy for your org. Varman runs 2 checks against Okta on a schedule and records each result as evidence.
MFA enrollment policy is active
high severityOkta should have an active MFA enrollment policy so users must register a second factor.
Password policy is active
medium severityOkta should have an active password policy enforcing complexity and rotation rules.
how to connect
Connecting Okta
An admin adds the details below in Varman under Integrations. Secret values are encrypted before they are stored.
- Okta domain
- Your Okta org domain, without https:// (e.g. acme.okta.com).
- API Token
- Security > API > Tokens > create a read-only token (needs policy read).