---
url: https://docs.realmsec.info/integration/okta.md
---

# Okta Integration

### Send Logs from Okta to Realm Fabric

1. Login to Okta as Administrator.
2. Copy the base URL from the address bar. You will need to enter this in the Realm console.
3. Click on **Admin** to log on to the admin portal.

![Okta Admin button](../images/okta-1-admin-button.png)

4. Click on **Applications > Applications**.

![Okta Applications](../images/okta-2-applications.png)

5. Click on **Create App Integration**.

![Okta Create api](../images/okta-3-create-new-services-api.png)

6. Select **API Services** > Click **Next**.
7. Enter a name for the integration:

> `Realm.Security`

![Okta App Integration](../images/okta-4-app-integration.png)

8. Click **Save**.
9. From the integration details page, click **General > Client Credentials > Edit**.

![Okta Client credentials](../images/okta-5-client-credentials.png)

10. Select **Public Key / Private Key**.

![Okta Select Public Private Key](../images/okta-6-private-public-key.png)

11. Click **Add Key**.

![Okta Add public key](../images/okta-7-add-public-key.png)

12. Click **Generate new key**.
13. Under **Private key > JSON**, click **Copy to clipboard**.

> **Important:** Save this private key somewhere safe — you will not be able to view it again. You will need to paste this key in the Realm Security console.

14. Click **Done**.
15. Click **Save**.

![Okta Save key](../images/okta-8-save-key.png)

16. Click **Save** in the confirmation dialog box.

![Okta Save key confirmation](../images/okta-9-save-key-confirmation.png)

17. Copy the **Client ID** and save it somewhere safe. You will need to enter it in the Realm Security console.

![Okta Copy client ID](../images/okta-10-copy-client-id.png)

18. Assign a read-only admin role to the app that was just created.

Click the **Admin Roles** tab > **Edit Assignments**.

![Okta Edit assignments](../images/okta-11-edit-assignments.png)

Select the **Administrator Read Only** role.

![Okta Read only role](../images/okta-12-read-only-admin-role.png)

19. Click **Save changes**.
20. Grant the app the `okta.logs.read` scope.
21. Click the **Okta API Scopes** tab.
22. Find the scope `okta.logs.read` in the **Scope** column and select **Grant**.

![Okta API scopes](../images/okta-13-api-scopes.png)

23. Select **Grant Access** on the confirmation pop-up.

![Okta API grant](../images/okta-14-api-scope-grant.png)