kapilduraphe/okta-mcp-server

This MCP server enables Claude to interact with Okta's user management system, providing comprehensive user and group management capabilities along with onboarding automation.
Prerequisites
- Node.js (v16 or higher)
- Claude Desktop App
- Okta Developer Account
- Admin API Token from Okta
Setup Instructions
1. Create an Okta Developer Account
- Go to the Okta Developer Console
- Create a new account or sign in to an existing one
- Note your Okta domain (e.g., dev-123456.okta.com)
2. Create an API Token
- In the Okta Developer Console, go to Security > API > Tokens
- Click "Create Token"
- Give your token a meaningful name (e.g., "MCP Server Token")
- Copy the token value (you won't be able to see it again)
3. Initial Project Setup
Install dependencies:
4. Configure Claude Desktop
Open your Claude Desktop configuration file:
For MacOS:
For Windows:
Add or update the configuration:
Save the file and restart Claude Desktop.
Available Tools
The server provides the following tools:
User Management
get_user
Retrieves detailed user information from Okta, including:
- User Details (ID, Status)
- Account Dates (Created, Activated, Last Login, etc.)
- Personal Information (Name, Email)
- Employment Details
- Contact Information
- Address
- Preferences
find_users_by_attribute
Search users by any profile attribute with advanced filtering:
- **Supported attributes**: firstName, lastName, email, manager, department, title, division, organization, employeeNumber, costCenter, userType, city, state
- **Search operators**:
- eq (exact match) - Works for all attributes
- sw (starts with) - Works for all attributes
- ew (ends with) - Works for most attributes
- co (contains) - Works for some attributes (firstName, lastName, email)
- pr (present/exists) - Works for all attributes (finds users with any value for that attribute)
- **Features**:
- Uses Okta's native search for optimal performance
- Automatic fallback to client-side filtering for unsupported operators
- PII masking in search results for sensitive attributes
- Status filtering (include/exclude inactive users)
- Pagination support with customizable limits
list_users
Lists users from Okta with optional filtering and pagination:
- Supports SCIM filter expressions (e.g., 'profile.firstName eq "John"')
- Free-form text search across multiple fields
- Sorting options (by status, creation date, etc.)
- Pagination support with customizable limits
activate_user
Activates a user in Okta:
- Option to send activation email
- Updates user status to active
suspend_user
Suspends a user in Okta
unsuspend_user
Unsuspends a previously suspended user in Okta
delete_user
Deletes a user from Okta (note: user must be deactivated first)
get_user_last_location
Retrieves the last known location and login information for a user from Okta system logs
Group Management
list_groups
Lists user groups from Okta with optional filtering and pagination:
- Filter expressions for groups (e.g., 'type eq "OKTA_GROUP"')
- Free-form text search across group fields
- Sorting options (by name, type, etc.)
- Pagination support with customizable limits
create_group
Creates a new group in Okta with a name and optional description
get_group
Retrieves detailed information about a specific group
delete_group
Deletes a group from Okta
assign_user_to_group
Assigns a user to a group in Okta
remove_user_from_group
Removes a user from a group in Okta
list_group_users
Lists all users in a specific group with pagination support
Onboarding Automation (Experimental)
> **Note:** The onboarding automation tools are experimental and may be subject to changes or limitations based on Okta's API constraints. Use with caution in production environments.
bulk_user_import