Skip to main content

Okta

The add-on works in collaboration with Netwrix Auditor, supplying data about activity on your Okta-based devices. Aggregating data into a single audit trail simplifies analysis, makes activity monitoring more cost effective, and helps you monitor your IT infrastructure.

Implemented as a service, this add-on facilitates the data transition from Okta-based systems to Netwrix Auditor. Provide connection details and specify parsing rules.

On a high level, the add-on works as follows:

  1. The add-on listens to the specified UDP ports and captures designated Syslog messages.
  2. The add-on processes these events into Netwrix Auditor-compatible format (Activity Records). Each Activity Record contains the user account, action, time, and other details.
  3. Using the Integration API, the add-on sends the activity records to the Netwrix Auditor Server, which writes them to the Long-Term Archive and the Audit Database.

See the Integration API topic for additional information on the structure of the Activity Record and the capabilities of the NIntegration API.

Prerequisites​

Before running the add-on, ensure that all the necessary components and policies are configured as follows:

On...Ensure that...
The Auditor Server side- .NET Framework 4.5 or later is installed. - The Audit Database settings are configured in Auditor Server. See the Prerequisites and Audit Database topics for additional information. - The TCP 9699 port (default Integration API port) is open for inbound connections. - The user writing data to the Audit Database is granted the Contributor role in Auditor. See the Role-Based Access and Delegation topic for additional information. Alternatively, you can grant the Global administrator role or add the user to the Netwrix Auditor Administrators group. In this case, this user has the most extended permissions in the product.

Accounts and Rights​

By default, the add-on runs under the Local System account. If the add-on and Auditor run on different machines, the corresponding computer account requires at least the Contributor role in Auditor. See the Role-Based Access and Delegation topic for additional information.

If the add-on and Auditor are installed on the same server, you don't need any special settings.

Considerations and Limitations​

  • The Add-On must be deployed in the same subnet as Okta and Auditor.
  • If you specify the monitoring plan name in the <NetwrixAuditorPlan> add-on configuration parameter incorrectly, the add-on generates temp files and uses disk space inefficiently.

Compatibility Notice​

Ensure to check your product version, and then review and update your add-ons and scripts that use the Netwrix Auditor Integration API. Download the latest add-on version in the Add-on Store.