
Okta MCP Server
by kapilduraphe
Manage Okta users, groups, and onboarding workflows directly from your AI client with full CRUD operations and bulk automation.
What it does
Okta MCP Server connects AI clients to Okta's identity and access management platform. It lets you manage users, groups, and run onboarding workflows — all through natural language commands. From looking up a user's last login location to bulk-importing new hires from CSV, this server bridges Okta's admin capabilities into your MCP-compatible AI tool.
Tools
- get_user — Retrieve detailed user information including status, profile, and login history
- find_users_by_attribute — Search users by profile attributes with advanced filtering (eq, sw, ew, co, pr operators) and automatic fallback for unsupported operators
- list_users — List users with SCIM filter expressions, free-form search, sorting, and pagination
- activate_user — Activate a deactivated user, optionally sending an activation email
- suspend_user — Suspend a user account in Okta
- unsuspend_user — Restore a previously suspended user
- delete_user — Delete a user from Okta (requires prior deactivation)
- get_user_last_location — Retrieve a user's last known login location and IP from system logs
- list_groups — List groups with filtering, search, sorting, and pagination
- create_group — Create a new Okta group with name and optional description
- get_group — Retrieve detailed information about a specific group
- delete_group — Remove a group from Okta
- assign_user_to_group — Add a user to a group
- remove_user_from_group — Remove a user from a group
- list_group_users — List all members of a group with pagination
- bulk_user_import — Import multiple users from CSV data with optional activation and group assignment
- assign_users_to_groups — Bulk-assign users to groups based on attribute mappings
- provision_applications — Provision application access for multiple users
- run_onboarding_workflow — End-to-end onboarding: CSV import, activation, group assignment, app provisioning, and welcome email
Installation
{
"mcpServers": {
"okta": {
"command": "npx",
"args": ["-y", "okta-mcp-server"],
"env": {
"OKTA_ORG_URL": "https://your-domain.okta.com",
"OKTA_API_TOKEN": "your-api-token"
}
}
}
}
Save to your claude_desktop_config.json and restart Claude Desktop. Requires an Okta admin API token and your org URL.
Supported hosts
- Claude Desktop
- Any MCP-compatible client (stdio transport)







