Identity & SSO

PurpletGo + Okta

Clear SSO sessions, remove groups, and deactivate the user in one step.

30-day free trial - no credit card required

What it does

What PurpletGo does in Okta

Clear a departing employee's Okta sessions, remove their groups, and deactivate them, with the apps they could reach listed before you revoke.

Clears all active Okta sessions.
Deactivates the user.
Removes the user from their Okta groups.
Lists the apps assigned to the person in Okta to suggest what else to revoke.
Runs when an admin or HR user revokes access for the offboarding, alongside the other systems selected for that person, and the result is recorded as revoked, failed, or needs manual action, with the reason.

What you need

Your Okta domain (for example your-company.okta.com).
An Okta API token created by an Org Admin or Super Admin.

Plan

All plans

Compare plans

Setup

Set up Okta in PurpletGo

1
In the Okta Admin Console, go to Security > API > Tokens and create a token.
2
In PurpletGo, open Integrations, find Okta, and click Connect.
3
Enter your Okta domain and API token, and confirm your password.

Good to know

Apps connected to Okta for single sign-on only keep their own accounts, so revoke high-risk apps directly as well.
Sessions already open inside other apps end on those apps' own schedule.

Why this matters

Okta is often the single sign-on gateway to dozens of other apps, so a missed deactivation can leave a departing employee with standing access to your entire connected app stack, not just one system.

Doing this by hand? Read how to offboard a user in Okta without leaving app access behind.

Okta FAQ

Common questions about the Okta integration

What does PurpletGo do in Okta?

Clear a departing employee's Okta sessions, remove their groups, and deactivate them, with the apps they could reach listed before you revoke.

Why does revoking Okta access matter when someone leaves?

Okta is often the single sign-on gateway to dozens of other apps, so a missed deactivation can leave a departing employee with standing access to your entire connected app stack, not just one system.

Which PurpletGo plan includes the Okta integration?

All plans.

What do I need to connect Okta to PurpletGo?

Your Okta domain (for example your-company.okta.com). An Okta API token created by an Org Admin or Super Admin.

Google Workspace Microsoft 365 / Azure AD JumpCloud OneLogin

Offboard with every system accounted for

Some integrations need the Team or Enterprise plan, shown above.

Start free trial