Exam Section

Percentage of Exam Related to Section

Identity and Access Management

36%

Active Directory Integration

Enable and manage delegated authentication with AD and LDAP using Okta agents

Preparation resources:

• Add and update users with Active Directory Just-In-Time provisioning
• Configure the Password authenticator
• Enable delegated authentication

Demonstrate understanding of Okta AD and LDAP agent architecture and best practices

Preparation resources:

• Install multiple Okta Active Directory agents
• Manage your Active Directory integration
• Configure DMZ server ports for Active Directory integrations

Manage Okta agent service account and permissions need for agents and in directories for password reset

Preparation resources:

• About Okta service account permissions

Demonstrate knowledge of the requirements for Okta/AD password policies

Preparation resources:

• Configure the Password authenticator

Demonstrate knowledge of user activation options when using AD as a source

Preparation resources:

• Manage your Active Directory integration
• Configure Active Directory import and account settings

Demonstrate an understanding of the difference between AD groups and Okta groups

Preparation resources:

• Import groups from Active Directory
• Manage Active Directory users and groups

Single Sign-On (SSO) Federation

Demonstrate knowledge of how to configure Okta as a service provider

Preparation resources:

• Identity Providers

Demonstrate understanding of the SAML assertion

Preparation resources:

• SAML app integrations
• CASB configuration guide

Demonstrate knowledge of the configuration of OIN apps

Preparation resources:

• App integrations
• Reveal the password of an app integration
• Configure Self Service approval workflow

Demonstrate knowledge of Org2Org use cases

Preparation resources:

• Integrate Okta Org2Org with Okta
• Okta Org2Org
• Okta Org2Org Integration Detail

Desktop SSO deployment Federation

Demonstrate knowledge of how to deploy Agentless Desktop SSO

Preparation resources:

• Active Directory Desktop Single Sign-on

Architecture

Demonstrate knowledge of how to configure RADIUS applications

Preparation resources:

• RADIUS server best practices

Demonstrate knowledge of high availability requirements on advanced agents (e.g., RADIUS, MFA, OPP)

Preparation resources:

• RADIUS server best practices
• Synchronize passwords from Okta to Active Directory

User Lifecycle Management

29%

Profile sourcing and write-back concepts

Demonstrate knowledge of HR as a source including the benefits of groups and group rules when using an external source

Preparation resources:

• Manage profiles
• About group rules
• Okta Expression Language overview

Demonstrate knowledge of when profile sourcing is used

Preparation resources:

• About attribute-level sourcing
• Profile Sourcing
• Manage profile and attribute sourcing

Demonstrate knowledge of the value of writing data back to directories and apps from Okta

Preparation resources:

• Manage profile and attribute sourcing
• Manage Group Push

Demonstrate ability to work with multiple profile sources

Preparation resources:

• About profile sourcing
• About attribute-level sourcing

Demonstrate knowledge of the requirements of Okta lifecycle management and the ability to write to applications

Preparation resources:

• Provision applications
• Add and update users with Active Directory Just-In-Time provisioning

Demonstrate understanding of Okta Workflows for advanced lifecycle management use cases

Preparation resources:

• Okta Workflows for Lifecycle Management
• Okta Workflows

Provisioning

Demonstrate knowledge of the different ways that Okta can perform lifecycle management against Apps (e.g., APIs, SCIM, SAML JIT, password sync, Org2Org)

Preparation resources:

• Integrate Okta Org2Org with Okta
• How to Perform Provisioning Within Okta

Demonstrate knowledge of the typical flow of user registration/onboarding, updates, and deprovisioning.

Preparation resources:

• Manage profile and attribute sourcing
• About user account status
• Provision applications

Demonstrate knowledge of how users and groups are processed during full and incremental imports

Preparation resources:

• Import users
• Directory integrations

Demonstrate knowledge of how Group Push can push Okta groups to provisioning-enabled third-party apps

Preparation resources:

• About Group Push
• Configure Group Linking

Security

20%

Okta Security Policy and Enforcement Framework

Manage authenticators and profiles

Preparation resources:

• Multifactor Authentication
• Configure the Okta Verify authenticator

Configure global session policies

Preparation resources:

• Global session policies
• Use multifactor authentication with the LDAP Interface

Demonstrate knowledge of authenticators, authentication methods, AAL (authentication assurance level), and end-user context to configure app-level policies

Preparation resources:

• Multifactor authentication
• Behavior Detection and evaluation

Demonstrate knowledge of device concepts including device context, device binding, registered vs. managed devices, and EDR signals

Preparation resources:

• Add an authentication policy rule
• Device registration

Demonstrate understanding of adaptive MFA policies

Preparation resources:

• Global session policies
• Behavior Detection and evaluation

Demonstrate knowledge of authorization servers

Preparation resources:

• Create an Authorization Server
• API Access Management

Demonstrate understanding of network zones, dynamic zones, IP zones, and blocklist zones

Preparation resources:

• Network Zones
• About dynamic zones

Monitoring and Troubleshooting

9%

Logging and Reporting

Demonstrate understanding of Okta logging

Preparation resources:

• System Log
• Useful System Log Queries

Demonstrate ability to filter the Okta syslog for events

Preparation resources:

• System Log

Demonstrate ability to interpret Okta log files

Preparation resources:

• Manage your LDAP integration
• Okta Active Directory agent variable definitions
• Troubleshoot the MFA for Windows Credential Provider

API Functions

6%

Token Management

Demonstrate knowledge of how to create API tokens with the correct permissions

Preparation resources:

• API token management
• API Access Management

API Extended Functions

Demonstrate knowledge of the importance of API rate limiting

Preparation resources:

• Burst rate limits
• Rate limits overview

Use Case

Percentage of Exam Related to Use Case

User Management

26%

Configuration tasks:

• Import users from a csv file
• Activate users
• Create a custom user type and assign users to it
• Add a custom attribute to a user type
• Assign users to a group by rule

Preparation resources:

• Import users from a CSV file
• Activate user accounts
• About custom user types in Universal Directory
• Create group rules

Application Setup

31%

Configuration tasks:

• Add a SAML 2.0 app integration
• Map Okta attributes to application attributes
• Create and map a custom attribute

Preparation resources:

• Create SAML app integrations using AIW
• Map Okta attributes to app attributes in the Profile Editor
• Modify attributes with expressions

Administrator Roles

20%

Configuration tasks:

• Create a custom admin role
• Assign users to the admin role
• Activate users with correct admin role
• Create an API token

Preparation resources:

• Use custom admin roles
• Set up administrators
• API token management

Security Enforcement

23%

Configuration tasks:

• Set up an authenticator
• Set up an MFA enrollment policy
• Modify the default global sessions policy
• Create an authentication policy for multifactor authentication
• Test the authentication policy

Preparation resources:

• Multifactor Authentication
• About MFA enrollment policies and rules
• Global session policies
• Authentication policies