Integrate Enterprise Identities

Customers using external partner resources need to establish access to these resources. Typically, this requires extra security processes that must be executed manually—adding a huge burden to already busy teams.

• Registration: Okta allows your partners to create their own accounts and passwords, and even perform extensible identity proofing, drastically reducing your administrative overhead.
• Account Recovery: Out-of-the-box workflows give your end users the ability to regain access to their accounts without contacting helpdesk.
• Support non enterprise partners: Okta masters their local accounts created in the cloud.

We offer connections for the most common enterprise-class providers,  giving your partners effortless access to your application through their existing identities. 

When your partners already have an ID to access your application, establishing new accounts is simple. Reducing friction increases adoption.

You no longer need to worry about maintaining code used for your integrations. Okta’s got it handled.

Of all the ways to integrate enterprise identities—manually, self-service, prebuilt IDP— federation is the most secure and needs the least amount of administrative oversight.

• Standards Support: Support for industry standards like SAML and OpenID Connect ensure federation by any compliant system your partners rely on.
• Just In Time: No need to pre-create identities—users can be established as they use the system and are automatically routed to their applications.
• Highly Secure: Since user access is controlled via the federation connection, access is determined by the user’s status with their own identity provider.

Allowing external users access to internal resources is risky since the lifecycle of their current status is not being internally maintained. Federated identity means the user's identity is associated with the status of their IDP.

• Leveraged status: A user’s privileges in their own system determines their access to your applications.
• Automatic revocation: When the B2B relationship ends terminating one connection to that parter terminates all users associated to that connection ensuring access is revoked appropriately.  

Decentralising administration eliminates the frustration of menial administrative tasks. Okta’s variety of roles let your partners keep administrative oversight over their own users.

• Scale administration: Increasing partner visibility reduces helpdesk calls to your team.
• Role based access: Maintain an additional level of control by delegating administrative access to your choice of roles and groups.