Okta Token with Host

Description

General

• Documentation: https://developer.okta.com/docs/guides/create-an-api-token/main/
• Summary: Okta is an identity and access management company, it provides cloud solutions that help companies manage and secure user authentication. This detector focuses on catching API tokens used to authenticate requests to Okta APIs when they appear alongside the Okta host domain. This allows for checking of the detected tokens.

Revoke the secret

An API token can be revoked from the API tab of the Okta dashboard. The authorization server that is attributed to the account can also be used to automatically rotate API keys.

Details for Okta Token with Host

• Family: token

• Category: identity_provider

• Company: Okta

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 2.75

• Prefixed: False