Okta syncer
The Okta syncer pulls users from your Okta organization into Casdoor using the Okta Users API. It handles pagination automatically and maps account status to Casdoor's IsForbidden flag.
Необхідні умови
In the Okta Admin Console, create an API token (Security → API → Tokens → Create Token). The token needs read access to users.
Note your Okta domain (e.g. https://your-org.okta.com).
Конфігурація
Create a new syncer in Casdoor (Syncers → Add) and fill in:
| Поле | Значення |
|---|---|
| Організація | Target Casdoor organization |
| Name | A unique name for this syncer |
| Type | Okta |
| Server URL | Your Okta domain (e.g. https://your-org.okta.com) |
| Password | Your Okta API token |
The database-related fields are not used and can be left empty.
Field mappings
| Okta field | Casdoor field | Примітки |
|---|---|---|
id | Id | Okta user ID |
profile.login | Ім'я | Username (usually email) |
profile.displayName | DisplayName | Full display name |
profile.firstName | FirstName | Given name |
profile.lastName | LastName | Family name |
profile.email | Електронна пошта | Primary email |
profile.mobilePhone | Телефон | Mobile number |
profile.title | Заголовок | Job title |
profile.preferredLanguage | Мова | Preferred language |
статус | IsForbidden | See status mapping below |
Account status mapping
Okta users in the following states are marked as IsForbidden = true in Casdoor:
SUSPENDEDDEPROVISIONEDLOCKED_OUT
All other statuses (ACTIVE, STAGED, PROVISIONED, PASSWORD_EXPIRED, RECOVERY) are treated as active.
Running the syncer
Click Test Connection to verify connectivity before enabling. Toggle Is enabled for scheduled sync, or click Sync to run an immediate import.
Pagination is handled internally via Okta's Link response headers; all users are retrieved regardless of directory size.