Integrating with Okta for Consent Preferences

You can integrate an Okta instance with OneTrust to create and update consent preferences.

Note:

This documentation references navigation instructions and image screenshots in the Developer Console interface view. To switch to the Developer Console view, click Classic UI above the main navigation menu and then click Developer Console.



Note:

You will need access to your Okta tenant to generate an API key and set up this integration. If you just need to test an account, you can sign up for a free tenant at https://developer.okta.com.

API keys expire every 30 days.

To generate an API key in Okta

  1. Log in to your Okta developer account.
  2. On the main navigation menu, click API > Tokens.

    The API screen appears.

  3. In the Tokens tab, click the Create Token button.


    The Create Token modal appears.

  4. Enter a name for the new token. Then, click the Create Token button.


  5. Click the Clipboard icon button to copy the Token Value. Then, click the Ok, got it button.
    Attention:

    You will not get another opportunity to copy the Token Value once this modal is closed.



To create the Create Consent workflow

You can create a consent integration for Okta by using the seeded workflow templates in the Gallery screen.

  1. On the Integrations menu, click Gallery.

    The Gallery screen appears.

  2. Navigate to the Okta system, then click on the tile.
    Tip:

    Use Data Mapping Automation and Targeted Data Discovery filters to locate the Okta system tile in the Gallery.

    The Gallery Details screen appears.

  3. In the Consent: Create block, click the Add button.


    The Add Workflow Name modal appears.

  4. Enter a name for the workflow in the Workflow Name field. Leave the Credential field blank.
    Note:

    Alternatively, you can create an API key credential type for Okta in the Integration module. The Okta token can also be added directly to the workflow, as seen in step 8.

    For more information on creating integration credentials, see Configuring Integration Credentials.



  5. Click the Create button.

    The Workflow Builder screen appears.

  6. In the Okta: GET User Profile block, click the Edit icon button.
  7. In the Request URL field, add your Okta tenant URL to the endpoint.
  8. In the Header Value field, enter the token copied from Okta.


  9. Click the Finish button.
    Note:

    This seeded workflow defaults to running daily at midnight. You can change this by editing the Built-in Schedule Trigger block.

  10. Click the Edit icon on the Webhook Trigger block.
  11. Click the Copy button next to HTTP POST URL field. You will use the webhook URL when configuring your consent preferences.


  12. Click the Done button to close the Webhook Trigger block.
  13. Click the Save button to save your changes.

To configure consent preferences

  1. On the main navigation menu, click Consent.

    The Consent Dashboard screen appears.

  2. Click Preference Centers.

    The Preference Centers screen appears.

  3. Click the Add New button to create a new preference center.

    The Create New Preference Center modal appears.

  4. Complete the fields, then click the Create button.
    Note:

    Ensure the preference center has a Purpose for Okta Email Marketing configured with Topics . For more information on creating consent purposes and topics, see Setting Up Purposes of Processing.



    The Preference Center Details screen appears.

  5. Add the Okta Email Marketing Purpose to the Preference Center.


  6. Click the Save button.
  7. Click the Publish button.
  8. Copy the Preference Center UUID from the URL. You will reference this information in a later step.


To copy the Purpose and Topic IDs

  1. Navigate to the Purpose Details screen for the Purpose configured in the Preference Center.
  2. On the Details tab, copy the Purpose ID. You will reference this information in a later step.


  3. Navigate to the Topics tab.
  4. Copy the Topic(s) and Topic ID(s) used in the Purpose. You will need to reference the pairing in a later step.


To update the Okta Create Consent workflow

  1. Return to the Workflow Builder screen of the Okta Create Consent integration.
  2. Click the Edit icon on the PUT Update the Preference... block.
  3. In the PrefcenterId field, paste the Preference Center UUID.


  4. In the Body field, paste the Topic and Topic ID pairs.




  5. In the Body field, paste the Purpose ID.


  6. Click the Finish button to close the block.
  7. Click the Save button.
  8. Click the Activate button.

To create a custom attribute in Okta

You will need to create and configure a custom attribute on the Okta user profile for the OneTrust integration to recognize.

  1. Log in to your Okta account. On the main navigation menu, select Users then Profile Editor.
    The Profile Editor screen appears
  2. Click the Edit Profile button next to the user profile.


  3. In the Attributes section, click the Add Attribute button.


    The Add Attribute modal appears.

  4. Complete the fields. For more information, see the Add Attribute Modal Reference .
  5. Click the Save button.

Add Attribute Modal Reference



Field
Description
Data type

Enter string array

Display name

Enter Marketing

Variable name

Enter marketing

Description

Enter a description the attribute

To create the Update Consent workflow

  1. On the Integrations menu, click Gallery.

    The Gallery screen appears.

  2. Navigate to the Okta system, then click on the tile.
    Tip:

    Use Data Mapping Automation and Targeted Data Discovery filters to locate the Okta system tile in the Gallery.

    The Gallery Details screen appears.

  3. In the Consent: Update Profile Information block, click the Add button.


    The Add Workflow Name modal appears.

  4. Enter a name for the workflow in the Workflow Name field. Leave the Credential field blank.


  5. Click the Create button.

    The Workflow Builder screen appears.

Data Subject Consent Updated

  1. Click the Edit icon in the Consent: Data Subject Consent Updated block.
  2. Paste the Purpose ID in the Value field.


  3. Click the Done button.

Okta GET Profile

  1. Click the Edit icon in the Okta GET Profile block.
  2. In the Request URL field, enter your Okta tenant URL.
  3. In the Value field, enter the token copied from Okta.


  4. Click the Finish button.

Okta Update User Profile Attributes

  1. Click the Edit icon in the Okta Update User Profile Attributes block.
  2. In the Request URL field, enter your Okta tenant URL.
  3. In the Value field, enter the token copied from Okta.
  4. In the Body field, paste the Topic and Topic ID pairs.


  5. Click the Finish button.
  6. Click the Save button.
  7. Click the Activate button.