# Okta Notes

Okta -> Admin -> input username -> assign applications

[Okta Assign Applications](https://mdr-multipass-admin.okta.com/admin/apps/active)

## OKTA API Tokens
Don't use the GUI for Okta tokens. Chris can generate a new Okta token with the correct user and access. Also, better to look in the bash history for Okta tokens


## Password expiration report
OKTA -> Reports -> Okta Password Health
Open with Brackets Not excel

[Okta Reports](https://mdr-multipass-admin.okta.com/reports)

## Okta and Terraform

Fred ignored the above advice and created an okta API key for himself (Web UI: `Admin->Security->API->Create Token`)

[Okta API to create token](https://mdr-multipass-admin.okta.com/admin/oauth2/as)

Then:
```
export OKTA_API_TOKEN=[token here]
terragrunt apply
```


## Okta Splunk Search

#Okta user create log
index=auth sourcetype="OktaIM2:log" "Create okta user"