LiveIdentity

Okta compliance checks for SOC 2 and ISO 27001

Check Okta against SOC 2 and ISO 27001: sign-on and password policy, administrator hygiene and application assignment, through a read-only app.

Okta access cannot change users, policies or applications under its Read-only Administrator role.

What it collects

Organization profile
User lifecycleactive, suspended and deactivated accounts
Administrator role assignments
Global session, password and authentication policies
Application inventory and assignment
Enabled authenticators

9 automated rules check this evidence. Every finding shows the captured configuration of its resource and the full history of what happened to it.

Controls it feeds

SOC 2 criteria

CC6.1
CC6.3

ISO 27001 Annex A controls

A.5.17
A.5.18
A.5.23
A.8.2
A.8.5

The SOC 2 page and the ISO 27001 page show where they sit in each framework.

Connecting it

Create the application
Add the public key
Grant the seven read scopes
Assign the Read-only Administrator role
Run the first scan

Okta is a trademark of Okta, Inc. Meiyam integrates with Okta through its published APIs; Meiyam is not affiliated with, sponsored by or endorsed by Okta, Inc. Trademark notices