Docs: Adds Okta API key requirements for SCIM-only Okta (#51985)

gravitational · Feb 10, 2025 · 5fe8901 · 5fe8901
1 parent 3045815
commit 5fe8901
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/docs/pages/enroll-resources/application-access/okta/scim-only.mdx b/docs/pages/enroll-resources/application-access/okta/scim-only.mdx
@@ -82,14 +82,20 @@ $ tctl plugins install okta  \
   --no-users-sync \
   --no-accesslist-sync \
   --no-appgroup-sync \
-  --scim
+  --scim \
   --api-token="${OKTA_API_TOKEN}"
 Successfully created Okta plugin "okta"
 
 SCIM Base URL: https://teleport.example.com:443/v1/webapi/scim/okta
 SCIM Identifier field for users: userName
 SCIM Bearer Token: 1234567891234567891234567890
 ```
+<Admonition type="note">
+The Okta API Token requires the following permissions:
+ - View users and their details
+ - View groups and their details
+ - View applications and their details
+</Admonition>
 
 </TabItem>
 </Tabs>