Okta Integration with ZTXGate
ZTXGate can integrate with Okta across identity authentication, user lifecycle, additional verification, and security-event signaling.
That allows Okta to remain part of the organization's identity stack while ZTXGate applies resource-level access policy and enforcement to private applications and services.
OIDC for User Authentication
ZTXGate can use Okta as an OIDC identity provider for user sign-in.
OIDC establishes the authenticated identity and associated claims. ZTXGate then evaluates that identity against device, resource, posture, time, approval, and authentication policy rather than treating login alone as authorization.
SCIM for User Lifecycle
SCIM can synchronize users and identity lifecycle information from the identity environment into ZTXGate.
Where appropriate, groups can be mapped to ZTXGate roles so joiner, mover, and leaver changes can flow into access policy with less duplicated administration.
Okta Verify for Additional Authentication
Connected ZTXGate deployments can use supported Okta Verify Push workflows for additional authentication when policy requires stronger verification for a resource.
Because Okta Verify depends on the Okta cloud service, this option requires the corresponding connectivity.
SSF / CAEP Security Signals
ZTXGate also supports Shared Signals Framework / Continuous Access Evaluation Profile (SSF/CAEP) integration so supported Okta security events can be received by ZTXGate and used to react to relevant identity or session changes.
This helps connect identity-provider security events to active access enforcement instead of waiting for the next full login cycle.
SSF/CAEP is a licensed ZTXGate capability.
Keep Authentication and Access Enforcement Separate
Okta remains the identity and authentication service. ZTXGate remains the policy-enforcement point for access to protected resources.
That separation lets an organization combine Okta identity with individually enrolled devices, MDM/EDR posture, temporary access, approvals, resource-specific policy, and searchable audit records.
Air-Gapped Deployments
Okta is a cloud-dependent integration and therefore requires connectivity. ZTXGate itself can operate fully air-gapped without a mandatory CoreZT-hosted cloud control plane.
For disconnected deployments, licensed integrated ZTXBAS remains available for phishing-resistant biometric authentication without a separate ZTXBAS server or internet-hosted push service.
Explore OIDC & SCIM · Explore all integrations · Start Free Trial