Book Image

Okta Administration Up and Running - Second Edition

By : HenkJan de Vries, Lovisa Stenbäcken Stjernlöf
Book Image

Okta Administration Up and Running - Second Edition

By: HenkJan de Vries, Lovisa Stenbäcken Stjernlöf

Overview of this book

Identity and access management (IAM) is a set of policies and technologies used to ensure an organization’s security, by carefully assigning roles and access to users and devices. This book will get you up and running with Okta, an IAM service that can help you manage both employees and customers. The book begins by helping you understand how Okta can be used as an IAM platform, before teaching you about Universal Directory and how to integrate with other directories and apps, as well as set up groups and policies for Joiner, Mover, and Leaver flows. This updated edition helps you to explore agentless desktop single sign-on (SSO) and multifactor authentication (MFA) solutions, and showing how to utilize Okta to meet NIST requirements. The chapters also walk you through Okta Workflows, low-/no-code automation functionalities, and custom API possibilities used to improve lifecycle management. Finally, you’ll delve into API access auditing and management, where you’ll discover how to leverage Advanced Server Access (ASA) for your cloud servers. By the end of this book, you’ll have learned how to implement Okta to enhance your organization's security and be able to use the book as a reference guide for the Okta certification exam.
Table of Contents (14 chapters)
1
Part 1:Getting Started with Okta
8
Part 2: Extending Okta

Securing a VPN with MFA

VPNs have been one of the standard ways to connect securely to applications and data behind organizational perimeters. As VPNs evolve, so do options to secure them. The credentials to log in can be compromised, and having additional security allows outside threats to be thwarted and secures what is usually most critical and sensitive behind the VPN.

Different VPN software and vendors deliver different types of integrations. Some might allow SSO to be set up, while others might use directories such as Active Directory or LDAP, and perhaps even RADIUS. In any of these methods, you can set Okta’s login credentials to be the only set of credentials the user has and add MFA to the login process.

As we spoke about earlier in this chapter, we can utilize at least two categories in securing access: something we know and something we have, and perhaps even something we are.

Depending on the type of VPN software running, the client of the user might be...