specterops/openhound-okta

This project, openhound-okta, gathers information from Okta and formats it for use in BloodHound, a security tool that maps out who has access to what across an organization's systems. Okta is a popular identity management platform that handles user logins and permissions. By pulling Okta's data into BloodHound, security teams can visualize the relationships between users, groups, and resources to spot potential security risks, like someone having more access than they should. At a high level, the tool is built as an extension to something called OpenHound, which is a framework for collecting data from various sources and converting it into a graph format BloodHound understands. OpenHound uses a Python library called DLT (Data Load Tool) to handle the collection and processing. This Okta extension specifically connects to Okta, pulls down the relevant resources, such as users, groups, and application assignments, and transforms them into "nodes" (think of these as dots representing things) and "edges" (the lines connecting them) that BloodHound can display and analyze. This would primarily be used by security professionals and IT administrators who are already using BloodHound to assess their organization's security posture. For example, if a company uses Okta to manage access to dozens of internal apps and cloud services, a security analyst could use this collector to import that access data into BloodHound and visually trace whether any user's permissions create an unintended path to sensitive resources. The README doesn't go into much detail beyond the basics. There's no deep documentation of configuration options, specific Okta data sources it collects, or setup steps included here, those are deferred to the OpenHound documentation site. It's worth noting this requires Python 3.13, which is a fairly recent version.