Answers for scope, access, data, and reports.
Short answers for evaluating Okta Assessment. Technical setup details stay in Resources.
Getting started
What does Atomation Okta Assessment do?
It runs an Okta assessment and turns configuration, evidence, alerting, and licensing signals into findings and reports.
How do we start?
Start with an assessment scoping call. We align org count, reporting needs, evidence requirements, alert coverage questions, licensing review needs, and delivery model.
Can we try it before a call?
Yes. The demo at demo.atomation.io is open without signup. Click through findings, evidence, and reports without connecting your own Okta tenant.
Is this only for Okta?
Yes. The current public product focus is Okta Assessment.
Access and data
Does Atomation write back to my Okta tenant?
No. The setup flow can configure the Atomation API Services app and its approved grants, but runtime assessment calls do not manage users, groups, policies, apps, or settings. Atomation does not auto-remediate findings in v1.
What access is required?
The assessment uses an Okta API Services app with 31 approved read scopes plus okta.appGrants.manage only for maintaining this connector's approved grants. A temporary Super Admin Okta API token performs setup and is revoked after verification.
Do you send raw identity data to third-party AI tools?
No. Current finding and report paths are deterministic and do not require an external AI service. Customer identity data is not sent to third-party AI tools for report generation.
Reports and scope
What does the report include?
Reports can include an executive summary, prioritized findings, evidence references, framework mapping, customer-supplied alert-coverage context, and licensing signals. The active portal exports reports as PDF or Markdown and supported inventory views as CSV.
Can it support compliance work?
Yes. Findings can be organized around framework lenses such as HIPAA, SOX ITGC, SOC 2, GLBA/FFIEC, ISO 27001, PCI DSS, CIS Controls v8, NIST 800-53, and customer-provided controls when the engagement requires it.
Can this be one-time or recurring?
The current portal supports on-demand scans and a later manual follow-up assessment. Automated scheduling, drift comparison, trend reporting, and enforced retention tiers are roadmap capabilities, not current production features.
Company
Who will I work with?
Atomation is veteran-owned and hands-on. You work directly with the product and assessment owner, not a generic ticket queue.
Where are you based?
Based in the Tampa Bay area. Serving Hillsborough, Pinellas, Pasco, and remote clients across the U.S.
Start with the smallest useful Okta assessment.
Request a scoped Okta assessment. We'll align the baseline around your org count, reporting needs, evidence requirements, and delivery model.