---
title: "Okta Integration with Sensu Server"
slug: "fortanix-dsm-okta-integration-with-sensu-server"
updated: 2026-04-17T17:01:52Z
published: 2026-04-17T17:01:52Z
canonical: "support.fortanix.com/fortanix-dsm-okta-integration-with-sensu-server"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta Integration with Sensu Server

## 1.0 Introduction

The purpose of this guide is to describe steps to integrate Sensu server with Okta for Open ID Connect (OIDC) based authentication.

## 2.0 Integration Steps

This section describes how to configure Okta, Sensu, and test the integration.

### 2.1 Configuration in Okta

1. Log in to the Okta admin console and go to **Applications**.
2. Click **App Integration**.
  1. Select **OIDC** as the **Sign-in method**.
  2. Select **Web Application** as the **Application type**.

![App_integration_SensuOkta.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/app_integration_sensuokta.png)

**Figure 1: App integration**
  3. Click **Next**.
3. On the New Web App Integration page, fill in the following information:
  1. **App integration name**- Type `sensu` as the value.
  2. **Grant type**- Select **Refresh Token**.
  3. **Sign-in redirect URIs**- **http://<api-url>/authorization-code/callback** Where, the `&lt;api url&gt;` for sensu is `&lt;&lt;serverip&gt;:8080&gt;` generally.
  4. **Assignments**- Select **Skip group assignment for now**.
4. Click **Save**.

![WebApp_integration_SensuOkta.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/webapp_integration_sensuokta.png)

![WebApp_integration1_SensuOkta.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/webapp_integration1_sensuokta.png)

**Figure 2: Web app integration**
5. A new Web App Integration is now created. Click the app, and copy the **Client ID**, **Client secret**, and **Okta domain** to the notepad.

![ClientCredentials_SensuOkta.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/clientcredentials_sensuokta.png)

**Figure 3: Copy client credentials**
6. Next, click the **Assignments** tab and add people/group assignments as required.

![Assignments_SensuOkta.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/assignments_sensuokta.png)

**Figure 4: Add people and group assignments**

### 2.2 Configuration in Sensu

1. Create an `oidc.yml` file with all the information. Here is a sample `oidc.yml` file:

```bash
type: oidc
api_version: authentication/v2
metadata:
  name: okta
spec:
  additional_scopes:
  - email
  - groups
  client_id: 0oael74dwhAImBVfk696
  client_secret: tfbocOodGFnxefgydm4yFSjDSLvpw_mv41vI1QLM
  redirect_uri: http://54.151.121.234:8080/api/enterprise/authentication/v2/oidc/callback
  server: https://fortanixsdkms.okta.com
  disable_offline_access: false
  username_claim: email
  group_claim: groups
  username_prefix: 'oidc:'
  group_prefix: 'oidc:'
```

Where,
  - `client_id`, `client_secret` and `server` are from Okta as mentioned in *Step 5* of [*Section 2.1: Configuration in Okta*](/v1/docs/okta-integration-with-sensu-server#21-configuration-in-okta).
  - `Redirect_uri`: Refers to the value provided as mentioned in *Step 3c* of [*Section 2.1: Configuration in Okta*](/v1/docs/okta-integration-with-sensu-server#21-configuration-in-okta).
2. Next, create OIDC authentication using the following command:

```bash
sensuctl create –-file oidc.yml
```

Check if the OIDC authentication is created using the following command:

```bash
sensuctl auth list
```
3. Now create a role and do role-binding for the user/group: For example, if you are creating a read-only role for a user- [rose.bush@fortanix.com](mailto:rose.bush@fortanix.com). Create a read-only role:

```bash
sensuctl role create readonlyuser --namespace default --resource=checks,entities,events --verb=get,list
```

Create a role binding on the user:

```bash
sensuctl role-binding create rbokta --user oidc:rose.bush@fortanix.com --role readonlyuser --namespace default
```

### 2.3 Test the Integration

1. Log in to the Sensu app and click **SIGN-IN WITH OKTA**.

![OktaSignin_SensuOkta.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/oktasignin_sensuokta.png)

**Figure 5: Sign in with Okta**
2. After you are logged in as an Okta user, you should be able to view the Sensu dashboard with the required “view” privileges.

![Dashboard_SensuOkta.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/dashboard_sensuokta.png)

**Figure 6: Sensu dashboard**

## Related

- [Upgrade Prechecks Using Sensu - Automated](/fortanix-data-security-manager-upgrade-prechecks-using-sensu-automated.md)