Okta MCP Server

What it does

Okta MCP Server connects AI clients to Okta's identity and access management platform. It lets you manage users, groups, and run onboarding workflows — all through natural language commands. From looking up a user's last login location to bulk-importing new hires from CSV, this server bridges Okta's admin capabilities into your MCP-compatible AI tool.

Tools

• get_user — Retrieve detailed user information including status, profile, and login history
• find_users_by_attribute — Search users by profile attributes with advanced filtering (eq, sw, ew, co, pr operators) and automatic fallback for unsupported operators
• list_users — List users with SCIM filter expressions, free-form search, sorting, and pagination
• activate_user — Activate a deactivated user, optionally sending an activation email
• suspend_user — Suspend a user account in Okta
• unsuspend_user — Restore a previously suspended user
• delete_user — Delete a user from Okta (requires prior deactivation)
• get_user_last_location — Retrieve a user's last known login location and IP from system logs
• list_groups — List groups with filtering, search, sorting, and pagination
• create_group — Create a new Okta group with name and optional description
• get_group — Retrieve detailed information about a specific group
• delete_group — Remove a group from Okta
• assign_user_to_group — Add a user to a group
• remove_user_from_group — Remove a user from a group
• list_group_users — List all members of a group with pagination
• bulk_user_import — Import multiple users from CSV data with optional activation and group assignment
• assign_users_to_groups — Bulk-assign users to groups based on attribute mappings
• provision_applications — Provision application access for multiple users
• run_onboarding_workflow — End-to-end onboarding: CSV import, activation, group assignment, app provisioning, and welcome email

Installation

{
  "mcpServers": {
    "okta": {
      "command": "npx",
      "args": ["-y", "okta-mcp-server"],
      "env": {
        "OKTA_ORG_URL": "https://your-domain.okta.com",
        "OKTA_API_TOKEN": "your-api-token"
      }
    }
  }
}

Save to your claude_desktop_config.json and restart Claude Desktop. Requires an Okta admin API token and your org URL.

Supported hosts

• Claude Desktop
• Any MCP-compatible client (stdio transport)