Syncing ILST with Okta

The ILST supports syncing users from Okta to your digital workplace. Configuring the ILST to work with Okta follows the typical ILST configuration process as outlined in Configuring the ILST except where noted below.

Sections in this article:

Okta documentation

Please reference the following Okta documentation when connecting the ILST to your Igloo digital workplace:

Configuration reference guide notes for Okta

Reference the element notes below when modifying your config.xml to connect to your Okta data source. Other elements should be configured as outlined in the ILST configuration reference guide.

<Connections>

Element Description
<Host>

Replace the domain with your Okta domain value:

<Host>domain.ldap.okta.com</Host>
<Username>

Replace the domain with your Okta domain value:

<Username>uid=userId@domain.com,ou=users,dc=domain,dc=okta,dc=com</Username>
<BaseDN>

Replace the domain with your Okta domain value:

<BaseDN>dc=domain,dc=okta,dc=com</BaseDN>
Typical <Connection> values for Okta

<UserAccounts>

Element Description
<UniqueIdentiferAttribute>

Ensure that the value of <DataTypeParser> matches what Okta is sending. This will most likely be a string, in which case the value of <DataTypeParser> should be:

<DataTypeParser>DirectString</DataTypeParser>
<ManagerAttribute> This feature is not supported when connecting to Okta. Either comment this element out or remove it from the configuration file.
<ProfilePictureAttribute> This feature is not supported when connecting to Okta. Either comment this element out or remove it from the configuration file.
Typical <UserAccount> values for Okta