Okta
MFA enrolment and factor coverage, suspicious sign-in events, and the SaaS app catalog — the broadest identity signal cmdash ingests.
What CMDash reads
- MFA & identity coverage
- Incidents & alerts
- SaaS app inventory
- Maturity telemetry
Syncs only read from Okta. Some integrations also support write-back actions on Command and Enterprise plans, such as opening a ticket or deactivating a user.
How you connect
An API key or token you create in the vendor console and enter in CMDash.
Once connected, CMDash syncs it every 4 hours by default. What it finds maps to your controls through rules you install or write.
Where this fits in your frameworks
- ISO/IEC 42001:2023 — MFA & identity coverage feeds Resources for AI Systems
- NIST AI Risk Management Framework 1.0 — MFA & identity coverage feeds GOVERN
- NIST Cybersecurity Framework 2.0 — MFA & identity coverage feeds Protect (PR)
- NIST Cybersecurity Framework (1.1, legacy) — MFA & identity coverage feeds Protect (PR)
- ISO/IEC 27001:2022 — MFA & identity coverage feeds Organizational Controls
- CIS Controls v8.1 — MFA & identity coverage feeds Account Management
- CMMC Level 1 — MFA & identity coverage feeds Identification & Authentication
- CMMC Level 2 — MFA & identity coverage feeds Identification & Authentication
- CMMC Level 3 — MFA & identity coverage feeds Identification & Authentication
- FedRAMP Moderate — MFA & identity coverage feeds Identification & Authentication
- SOC 2 Type II — MFA & identity coverage feeds Logical & Physical Access
- HITRUST CSF v11 — MFA & identity coverage feeds Access Control
- TISAX (VDA ISA v6) — MFA & identity coverage feeds Identity and Access Management
- SOX ITGC — MFA & identity coverage feeds Access Management
- GDPR — MFA & identity coverage feeds Technical Measures
- HIPAA Security Rule — MFA & identity coverage feeds Technical Safeguards
- PCI DSS v4.0.1 — MFA & identity coverage feeds User Identification
- DORA — MFA & identity coverage feeds ICT Risk Management
- NYDFS Cybersecurity Regulation — MFA & identity coverage feeds Multi-Factor Authentication
- NIST SP 800-171 Revision 3 — MFA & identity coverage feeds Identification and Authentication
This is where Okta’s data is documented as relevant on our framework pages — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
Also in Identity & Access
Ready to see your posture?
Start a 30-day free trial of any paid plan — a card is required, and it converts unless you cancel — or sign up for Free with no card at all.