# Your Okta org. Who has access, at a glance.

Source: https://corespeed.io/integrations/okta

Connect Okta to Claude Code, Codex, Cursor or any MCP agent through CoreSpeed. Your agent looks up users, groups and app assignments, reads the System Log, and drafts an access review or an offboarding checklist. It uses an admin API token you create, with that admin's privileges, and every lifecycle action is a separate call.

## Set up an agent

Give your agent this line: `set up https://corespeed.io/SKILL.md (read it raw, e.g. with curl)`

It fetches the skill at https://corespeed.io/SKILL.md, adds the CoreSpeed MCP server, signs you in (or up), and keeps the skill for next time. Connect Okta after setup. Access follows the connected account and its permissions. Create an account: https://app.corespeed.io/sign-up

## Someone left today. See what they can still open

Your agent finds the user, lists the apps still assigned, and checks recent sign-ins, before anyone changes access.

You ask your agent: "Drew left the company today. Find Drew in Okta, list the apps still assigned to Drew, and check the System Log for sign-ins this week. Do not change anything."

It calls CoreSpeed:

- `okta__list_users`: ok, 391 ms
- `okta__list_applications`: ok, 517 ms
- `okta__list_system_logs`: ok, 688 ms

It reads from: Okta.

### Offboarding check: Five apps still open.

Drew is still active in Okta with five apps assigned. The last sign-in was Tuesday evening.

**Still assigned**

- Salesforce, AWS, Slack, Google Workspace, and Zoom.

**For a person to do**

- Suspend the account.
- Remove the five app assignments.

_Illustrative org · Fictional data · No user changed_

All connectors: https://corespeed.io/docs/connectors

## From users and logs to a clear access review

Requests you can make once Okta is connected. The data is fictional.

### Review a group

Group · Finance · Members and their state

- Members: 4
- Suspended: 1 still in the group
- A review, not a change

### Read the System Log

Sign-ins this week · System Log events

- User: drew@acme.dev
- Last sign-in: Tuesday, 18:42
- Read only

### Hold a lifecycle action

Suspend a user · A change waits for you

- User: drew@acme.dev
- Policy: Ask before any lifecycle action
- Waiting for you

## Keep your agent. Bring your work

One CoreSpeed account, across compatible agents.

1. **Set up CoreSpeed**: Give your agent the setup line. It adds CoreSpeed and signs you in.
2. **Connect Okta**: Authorize the account and the content you need.
3. **Start with one task**: Ask for a summary, a brief, or a draft. Review the answer.

Setup guides: Claude Code https://corespeed.io/docs/mcp#claude-code · Codex https://corespeed.io/docs/mcp#codex · Cursor https://corespeed.io/docs/mcp#cursor

## Questions

### What can my agent do in Okta?

What the admin who created the API token can do: users and their lifecycle, groups and members, app assignments, and System Log reads.

### Does creating a user send an activation email?

By default, yes, as in Okta's own API. Ask the agent to create the user without activation to stage it with no email.

### Can my agent suspend or delete a user on its own?

Only if the token allows it, and each lifecycle action is a separate tool call. Approvals can hold it for a person. How approvals work: https://corespeed.io/docs/approvals

### Do I have to switch agents?

No. CoreSpeed adds tools to the agent you already use: Claude Code, Codex, Cursor, or another MCP client. Each one signs in once.

### Can my agent access every account in our organization?

No. Access follows your CoreSpeed identity, each connection's visibility, and the app's own permissions. Personal connections stay private.

### Does this work without connecting an account?

No. Connect the app's account first; your CoreSpeed workspace shows what each app needs. The examples on this page use fictional data. All connectors: https://corespeed.io/docs/connectors

Every tool and price: https://corespeed.io/catalog/okta

## Related pages

- [Auth0 for Claude Code, Codex, and Cursor](https://corespeed.io/integrations/auth0): Explain failed sign-ins from tenant logs and manage Auth0 users, roles and Actions from your agent.
- [AWS for Claude Code, Codex, and Cursor](https://corespeed.io/integrations/aws): Let your agent call any AWS API with your IAM credentials. Writes and secret reads can wait for a person.
- [Shared agent tools and controls for teams](https://corespeed.io/solutions/teams): Manage shared connections, approval policies, and tool usage for teams working across Claude Code, Codex, and other MCP clients.

## Sources

- Connectors: https://corespeed.io/docs/connectors
- Okta Management APIs: https://developer.okta.com/docs/reference/core-okta-api/
- Okta System Log query: https://developer.okta.com/docs/reference/system-log-query/
- Create an Okta API token: https://developer.okta.com/docs/guides/create-an-api-token/main/

Reviewed 2026-11-10.

## Links

- Product overview: https://corespeed.io/ (Markdown: https://corespeed.io/index.md)
- All integrations: https://corespeed.io/integrations (Markdown: https://corespeed.io/integrations.md)
- Documentation: https://corespeed.io/docs
- Pricing: https://corespeed.io/pricing (Markdown: https://corespeed.io/pricing.md)