Okta Unified Skill for Claude Code

A Claude Code skill that unifies okta-mcp-server (admin operations) with okta-cli (developer onboarding) for complete Okta identity management.

Architecture

┌─────────────────────────────────────────────────────────────────┐
│                    Okta Unified Skill                           │
├────────────────────────────┬────────────────────────────────────┤
│   okta-mcp-server          │          okta-cli                  │
│   (MCP Tools)              │        (CLI Commands)              │
├────────────────────────────┼────────────────────────────────────┤
│ • User CRUD                │ • okta register (new account)      │
│ • Group management         │ • okta login (authenticate)        │
│ • Application management   │ • okta apps create (with configs)  │
│ • Policy management        │ • okta start (sample apps)         │
│ • Log retrieval            │ • okta logs (streaming)            │
└────────────────────────────┴────────────────────────────────────┘

Installation

Option 1: Link to Skills Directory

# Clone this repo (if not already)
git clone https://github.com/okta/okta-cli.git
cd okta-cli

# Link to your skills plugins directory
ln -s $(pwd)/claude-skill ~/.skills/plugins/okta
# Or wherever your Claude Code plugins are configured

Option 2: Copy to Plugins Directory

cp -r claude-skill/. ~/.skills/plugins/okta/

Prerequisites

For okta-cli commands:

1. Install okta-cli:

   brew install oktadeveloper/tap/okta

2. Authenticate:

   okta login
   # Or create new account: okta register

For okta-mcp-server tools:

1. Install okta-mcp-server:

   git clone https://github.com/okta/okta-mcp-server.git
   cd okta-mcp-server
   uv sync

2. Configure MCP client (Claude Desktop example):

   {
     "mcpServers": {
       "okta": {
         "command": "uv",
         "args": ["run", "okta-mcp-server"],
         "env": {
           "OKTA_ORG_URL": "https://dev-XXXXXXXX.okta.com",
           "OKTA_CLIENT_ID": "0oa...",
           "OKTA_SCOPES": "okta.users.manage okta.groups.manage okta.apps.manage"
         }
       }
     }
   }

Usage

The skill provides guidance for:

• Developer Onboarding: Creating Okta accounts, bootstrapping projects
• User Provisioning: Creating/managing users and groups
• Application Management: Creating and configuring OIDC applications
• Security Auditing: Reviewing policies, analyzing logs

Example Prompts

"Set up Okta authentication for my Spring Boot project"
"Create a new user and add them to the Engineering group"
"Audit our Okta security configuration"
"Bootstrap a React app with Okta login"

Skill Structure

claude-skill/
├── .claude-plugin/
│   └── plugin.json           # Plugin metadata
├── skills/
│   └── okta/
│       ├── SKILL.md          # Main skill entry point
│       ├── references/
│       │   └── api-reference.md
│       └── workflows/
│           ├── new-developer-onboarding.md
│           ├── add-auth-to-project.md
│           ├── user-provisioning.md
│           └── security-audit.md
└── README.md

When to Use Which Tool

Task	Tool
Create new Okta account	okta register (CLI)
Manage users/groups	okta-mcp-server
Bootstrap sample app	okta start (CLI)
Create OIDC app with framework config	okta apps create (CLI)
Manage policies	okta-mcp-server
View/stream logs	Either
Full app CRUD	okta-mcp-server

Contributing

Improvements welcome! Please submit issues and PRs to the okta-cli repository.

License

Apache 2.0 - See LICENSE for details.