Okta User Management

🚀 Okta MCP Server

This MCP server enables Claude to interact with Okta's user management system, providing user and group management functionality.

🚀 Quick Start

Prerequisites

• Node.js (v16 or higher)
• Claude desktop application
• Okta developer account
• Okta administrator API Token

Setup Instructions

1. Create an Okta Developer Account

• Visit the Okta Developer Console.
• Create a new account or log in to an existing one.
• Record your Okta domain name (e.g., dev-123456.okta.com).

2. Create an API Token

• In the Okta Developer Console, go to Security > API > Tokens.
• Click "Create Token".
• Give your token a meaningful name (e.g., "MCP Server Token").
• Copy the token value (you won't be able to see it again).

3. Initial Project Setup

Install dependencies:

npm install

4. Configure the Claude Desktop Application

Add the following content to the config.json file:

{
  "okta": {
    "url": "https://your-domain.okta.com",
    "token": "your-okta-token"
  }
}

✨ Features

Available Tools

Get User Details

Use the get-user command to get the details of a single user:

claudius get-user --id <user-id>

List All Users

List all users in Okta:

claudius list-users

Example Usage

Use the following commands in the Claude desktop application:

• Create a new group:

  claudius create-group --name "New Group"
  

• Delete a specified group:

  claudius delete-group --id <group-id>
  

📚 Documentation

Error Handling

Common Errors

1. Insufficient Permissions: Ensure your API Token has administrator permissions.
2. Connection Issues: Check the Okta service status or your network connection.

Troubleshooting

Check the Configuration File

Ensure the URL and token values in the config.json file are correct.

View Logs

View the log output of the Claude desktop application in the console for more information.

Security Considerations

• Implement rate limiting to prevent abuse.
• Monitor API usage to ensure compliance.
• Regularly review and minimize the permissions of the API Token.

Type Definitions

The server includes TypeScript interfaces for Okta user and group data:

interface OktaUserProfile {
  login: string;
  email: string;
  secondEmail?: string;
  firstName: string;
  lastName: string;
  displayName: string;
  nickName?: string;
  organization: string;
  title: string;
  division: string;
  department: string;
  employeeNumber: string;
  userType: string;
  costCenter: string;
  mobilePhone?: string;
  primaryPhone?: string;
  streetAddress: string;
  city: string;
  state: string;
  zipCode: string;
  countryCode: string;
  preferredLanguage: string;
  profileUrl?: string;
}

interface OktaUser {
  id: string;
  status: string;
  created: string;
  activated: string;
  lastLogin: string;
  lastUpdated: string;
  statusChanged: string;
  passwordChanged: string;
  profile: OktaUserProfile;
}

interface OktaGroup {
  id: string;
  created: string;
  lastUpdated: string;
  lastMembershipUpdated: string;
  type: string;
  objectClass: string[];
  profile: {
    name: string;
    description: string;
  };
}

📄 License

MIT License - See the LICENSE file for details.

💡 Support

If you encounter any issues:

• Check the troubleshooting section.
• View the logs of the Claude desktop application.
• Check the Okta developer documentation.