✨ Software.com is now Antenna. Read more →
Skip to Content
Integrations

Okta Directory

Antenna syncs your Okta directory to keep contributor identities, emails, and employment details current. Use it to resolve Git, project tracker, and AI tool accounts to the same person without maintaining a manual user list.

This is an API Service integration and is separate from Antenna’s Okta Single Sign-On integration. SSO controls how users log in to Antenna; the Okta Directory integration reads your directory for identity resolution. You can use either one on its own, or both together.

Prerequisites

  • Okta administrator access to install and authorize applications from the Okta Integration Network (OIN)
  • Admin access to your Antenna organization

Required permission

The integration requests a single read-only scope:

ScopePurpose
okta.users.readRead users and their profile attributes

Setup

Install Antenna from the OIN

  1. In the Okta Admin Console, go to Applications > Browse App Catalog.
  2. Search for Antenna and open the listing.
  3. Click Add Integration.

Install and authorize

Click Install & Authorize and grant the okta.users.read scope.

Copy the client secret when it is shown — it appears only once. If you lose it, you must rotate the credential to generate a new one.

Copy your domain and client ID

Open the General tab of the application and copy the Okta domain (for example, acme.okta.com) and the Client ID.

Connect in Antenna

  1. In app.antenna.dev , go to Settings > Sources > Okta Directory.
  2. Enter your Okta domain, Client ID, and client secret.
  3. Click Connect.

Antenna validates the credentials when you connect, so an invalid secret or a missing scope is rejected immediately. After connecting, Antenna imports your directory and then refreshes it automatically.

Data collected

Antenna reads user records and their profile attributes, including name, email, username, status, and manager. We use these to match directory users to your Git, project tracker, and AI tool accounts.

Antenna only reads from Okta. We never create, update, deactivate, or delete Okta users or groups, and we do not write any data back to your directory.

Rotate credentials

Rotate the client secret if it is lost or exposed:

  1. In Okta, open the Antenna application and go to the General tab.
  2. Generate a new client secret and copy it.
  3. In Antenna, go to Settings > Sources > Okta Directory, enter the new secret, and save.
  4. Remove the old secret in Okta once the sync succeeds.

Your Okta domain and client ID do not change when you rotate the secret.

Disconnect

  1. In Antenna, go to Settings > Sources > Okta Directory and click Disconnect.
  2. In Okta, open the Antenna application and deactivate or delete it to revoke the granted scope.

Disconnecting stops all future syncs. Previously imported identities remain in Antenna so your historical metrics stay intact.

Troubleshooting

IssueResolution
Invalid credentials when connectingConfirm the Okta domain has no https:// prefix or trailing slash, and that the client ID and secret come from the same Antenna application.
Lost client secretThe secret is shown only once. Rotate the credential to generate a new one.
Insufficient scope errorsReopen the application in Okta and confirm okta.users.read is granted. Re-run Install & Authorize if it is missing.
Users missing from AntennaDeactivated and suspended users may be excluded. Confirm the user is active in Okta and wait for the next sync to complete.
Sync stopped unexpectedlyVerify the application is still active in Okta and that the client secret has not been rotated or revoked.

Support

If you need help connecting or verifying your directory sync, contact us at support@antenna.dev.

Last updated on
IntegrationsBitbucket