Okta Fundamentals with Okta Identity Engine

Create a free developer Okta Identity Engine tenant by signing up at developer.com/signup, activate the welcome email, and access the admin console to configure users, applications, and security policies.

Explore how Okta creates users through multiple methods, including manual admin console creation, csv import, ad/ldap integration, skim provisioning, api integration, self-registration, social providers, and just-in-time provisioning.

Create and activate three Okta source user accounts from the admin console by adding people with first name, last name, username, and primary email, then set passwords and verify activation.

Import users into Okta from a CSV file using the provided template with login, first name, last name, and email. Activate new users automatically and verify activation via emails.

Learn to create groups in Okta, such as support, sales, and managers, and assign users like James Snow and Jake to these groups via the directory groups interface.

Configure group membership automatically with group rules that match a user's title to assign them to the managers group; edit profiles, activate rules, and preview matches.

Add a swa application from the app catalog in the admin console. Name it and enable secure web authentication with username and password, then assign to a user.

Create and configure a swa application in the admin console, choose secure authentication, assign it to yourself, and experience auto login from the end user dashboard.

Learn how to configure a SAML-based Okta integration for Salesforce, adding Salesforce to Okta, enabling SAML 2.0, creating a custom Okta username format for provisioning, and reviewing SAML setup details.

Enable Saml single sign-on in Salesforce. Create a new sso setting named fundamentals for the Okta integration, then configure issuer, certificate, login url, and entity id, and assign a user.

Configure a Salesforce SP-initiated SAML flow with Okta by creating a custom Salesforce domain, provisioning and deploying it, updating login URLs and entity IDs, and testing the single sign-on setup.

Configure Okta lifecycle management to provision Salesforce users, enabling create, update, and activate, link pre-existing accounts via external IDs, and verify three users are provisioned.

Review system logs to troubleshoot provisioning events for Salesforce integration and fix a guest user role ID error. Confirm profile pushes and downstream provisioning succeed.

Install Saml tracer in Firefox or Chrome to troubleshoot Saml authentication issues and inspect requests and responses between your browser and an IDP or service provider.

Learn to capture IDP-initiated SAML flow with the SAML tracer in Okta, inspecting the SAML assertion, issuer, certificate, and response for the Salesforce app.

Learn how SP-initiated login differs from IDP-initiated login by using the SAML tracer to capture authentication requests and responses between the service provider Salesforce, Okta, and the identity provider.

Set up an Okta admin and a service account, install the Active Directory agent, and configure AD integration to sync selected users and organization units with Okta Identity Engine.

Explore how to import and provision users and groups from Active Directory into Okta, configure import schedules and assignments to downstream apps, and enable just-in-time provisioning for seamless access.

Learn to troubleshoot Okta and Active Directory integration by inspecting the add agent, logs, and request IDs, and configure verbose logging and AD agent settings for reliable user imports.

Create a custom SAML 2.0 app in Okta org one, assign a user, and set placeholders for the SSO URL and audience URI for org two.

Run lab three tests user access via inbound SAML in org two, signing into the Okta dashboard, selecting the inbound SAML app, and provisioning the user into Salesforce for access.

Troubleshoot inbound saml sso with the saml tracer and logs across two orgs, identifying a missing login attribute and misconfigured attribute mapping.

Configure password policy in Okta Identity Engine, differentiate from Okta classic, add Okta Verify with Fastpass and push notifications, and create a sales group policy with complexity and expiry rules.

Configure security outcomes by understanding assurance levels, from level one with any one factor type, to level two with possession and knowledge, and level three with inherence, possession, or knowledge.

Configure app level authentication policies for low, medium, and high assurance in Okta Identity Engine, assign apps, and define catch all rules, factors, and two minutes re-authentication.

Demonstrates app level authentication policy across low, medium, and high assurance apps with email magic links, password prompts, and google authenticator enrollment for two-factor security.

Explore flexible account recovery with Okta Identity Engine, enabling self-service password management and account unlock via email, Google Authenticator, and Okta verify push, aligned with the sales group password policy.

Create an API token as a super administrator in Okta's UI security API, name and copy the token, and note its 30-day expiry with renewal on activity and inherited permissions.

Set up postman for Okta API testing by creating a new workspace, importing a preconfigured environment, and configuring the URL, API key, and username and password for secure API calls.

Create and activate new users with password and recovery questions, then assign a read-only admin role via the API in the Okta fundamentals with Okta Identity Engine course.

Manage Okta groups via api using Postman, including creating groups and configuring their name and description. Add or remove members, verify group membership, and list all groups in your tenant.

Learn to manage apps via the Okta API by registering a custom app, assigning it to the everyone group, and testing lifecycle operations with Postman.

Extend user attributes via API by adding a custom profile attribute, such as Twitter username, to a user and verify changes with get and post calls in Postman.

Master group rules via API to auto-assign users to groups based on attributes like cost center, then activate and validate the rule in Okta Identity Engine.

Log in to your Okta developer tenant, gather the authorization server details, audience, and issue URI for the implicit flow, and prepare the v1/authorize, v1/token endpoints plus a Udemy scope.

Learn how the authorization code flow securely exchanges an authorization code for an access token in confidential web apps, using client ID and secret with the authorization and token endpoints.

Implement the authorization code flow with OpenID Connect scope openid and email to retrieve the user's ID and email from the ID token via Okta's token endpoint.

Learn how to use Postman to perform the authorization code flow and exchange a code for an access token, including environment setup and key endpoints.