Skip to main content
Okta Integration Connect your Okta environment with June to enable secure API-based access to users, groups, and application assignments.

What you’ll accomplish

  • Create an Okta OAuth 2.0 application
  • Assign admin roles to the app
  • Provide June with your client ID and tenant URL
  • Enable automated identity data ingestion

Prerequisites

Before starting the integration, ensure you have:
  • Okta Super Admin access
  • Access to create OAuth 2.0 applications in Okta

Okta OAuth 2.0 Application setup

Step 1: Add June Application in Okta

1

Access Integrations

  1. Log into June
  2. Navigate to Integrations page
  3. Choose “Okta” from the available integrations
  4. Before you enter any details, you will need to create an Okta OAuth 2.0 application.
  5. Copy the Okta public key URL. You will need this for configuring client credentials using PUBLIC KEYS in Okta.
2

Access Okta Applications

  1. Log into your Okta admin console
  2. Navigate to Applications > Applications
  3. Click Create App Integration
3

Choose Integration Type

  1. Select API Services as the sign-in method
  2. Click Next to continue
  3. Enter application name: “June API Integration”
Okta Create App Integration
4

Configure Client Credentials

  1. Select the June API Integration application
  2. Go to the General tab
  3. Click Edit on the Client Credentials section
  4. Select Public key / Private key option
  5. Under PUBLIC KEYS, select Use a URL to fetch keys dynamically
  6. and add the Okta public key URL you copied earlier to the Url field.
  7. Click Save
Okta Public Key
5

Turn off DPoP

  1. Go to the General tab
  2. Click Edit on the General Settings section
  3. Uncheck the Require Demonstrating Proof of Possession (DPoP) header in token requests checkbox
  4. Click Save
6

Okta API Scopes

  1. Go to the Okta API Scopes tab
  2. Grant the following scopes to the application:
  • okta.users.read
  • okta.groups.read
  • okta.apps.read
  • okta.logs.read
7

Assign Admin Roles

  1. Go to the Admin roles tab
  2. Click Edit assignments
  3. Select Read-only Administrator role to assign to the application
  4. Click Save Changes
Okta Admin Roles

Step 2: Set up Okta Integration in June

1

Complete Integration Setup

  1. Go back to June integrations page and select Okta
  2. Copy the Client ID from the Client Credentials section in Okta and paste it in the Client ID field
  3. Copy your Okta tenant URL and paste it in the Tenant URL field
  4. Click Save
  5. If the integration is successful, you should see a message saying “Integration setup complete” and the Status should be Active.
2

Test the Integration

  1. Click on the dropdown menu that has the status of the integration
  2. Click Test Integration
  3. If the integration is successful, you should see a message saying “Integration test successful” and the Status should be Active.
  4. If the integration is not successful, you should see a message saying “Integration test failed” and the Status should be Inactive.
3

Sync data from Okta

  1. Click on the dropdown menu that has the status of the integration
  2. Click Sync Now
  3. You should see the employees from Okta being synced to June under the Employees tab.

Best Practices

Security

  • Principle of Least Privilege: Grant minimum required access to users
  • Regular Access Reviews: Periodically review user access and group memberships
  • MFA Enforcement: Require multi-factor authentication for all users
  • Certificate Management: Monitor SAML certificate expiration dates

User Management

  • Consistent Naming: Use consistent naming conventions for groups and roles
  • Automated Lifecycle: Leverage SCIM for automated user provisioning/deprovisioning
  • Department Alignment: Align June access with organizational structure
  • Regular Audits: Conduct regular access audits and cleanup

Performance

  • Group Optimization: Use groups efficiently to minimize provisioning overhead
  • Batch Operations: Leverage bulk operations for large user base changes
  • Sync Frequency: Configure appropriate sync frequencies for your needs
  • Error Monitoring: Set up monitoring for provisioning errors and failures

Support Resources

Need help with your Okta integration?
  • Okta Documentation: Review this article about why June needs admin roles assigned.
  • June Support: Contact support for integration-specific assistance
  • Community Forum: Join discussions about identity provider integrations
Syncing data from Okta to June may take up to 15 minutes based on the number of users in your Okta environment.
I