# Update the Extended account access settings for Okta

{% hint style="info" %}
**Who can use this feature?**

* Workspace **Owners**, **Super Admins**, and **Admins**
* Supported using the Cerby web app
  {% endhint %}

As a workspace **Admin**, **Super Admin**, or **Owner**, you can update the settings of the [**Extended account access**](https://help.cerby.com/getting-started/concepts/credential-management/extended-account-access) feature for Okta. With this feature, you and all workspace members can sync and extend the accounts they own to access them from their Okta dashboard powered by Cerby’s automated login.

You may want to update these settings if the domain of your Okta instance changes or the Okta API token expires. Cerby will display the **Update** status in your workspace settings to indicate when the token is no longer valid to perform syncs.

***

## Requirements

The following are the requirements to update the Extended account access settings:

* A user account in Okta with the following roles:
* [Application Administrator](https://support.okta.com/help/s/article/What-are-Application-Administrator-roles-and-permissions?language=en_US) to create and manage app integrations in your Okta tenant
* [Read-only Administrator](https://help.okta.com/en-us/content/topics/security/administrators-read-only-admin.htm) to read Okta groups
* A user account in Cerby with the workspace **Admin**, **Super Admin**, or **Owner** role
* A new API token from Okta created for this purpose. For instructions on how to create or retrieve the token, read the official documentation [Manage Okta API tokens ](https://help.okta.com/en-us/content/topics/security/api.htm#create-okta-api-token)Additionally, set the corresponding [rate limits](https://support.okta.com/help/s/article/API-Token-Rate-Limit-Violation?language=en_US) for the following API endpoint:
* `/api/v1/apps*`

***

## Update the Extended account access settings for Okta

To update the Extended account access settings for Okta, you must complete the following steps:

1. Log in to your [Cerby](https://app.cerby.com/) workspace using your web browser.
2. Select the **Settings** option from the left navigation drawer. The **Workspace Configuration** page is displayed.
3. Activate the **IdP Settings** tab. The **Identity Provider Settings** section is displayed. The fields related to the **Extended account access** feature are **IdP Domain** and **API Token**.
4. Click the **More options** (...) icon of the field you want to update. A drop-down list is displayed.
5. Select the **Edit** option from the list.
6. Confirm your identity according to your multi-factor authentication (MFA) method:
   * [Push notification on the Cerby mobile app](https://help.cerby.com/tips-and-troubleshooting/best-practices/set-up-your-identity-with-cerby-s-mfa-methods#h-f2f6b354f7)
   * [Email magic link](https://help.cerby.com/tips-and-troubleshooting/best-practices/set-up-your-identity-with-cerby-s-mfa-methods#h-1f5622eac0)

The input field is enabled in editing mode.

7. Enter the new value in the corresponding input field:

   * **IdP Domain:** It is the domain of the Okta tenant configured for your Cerby workspace.

   **IMPORTANT:** You must include the protocol part (**`https://`**) of the URL. For example, **`https://mycompany.okta.com`**.

* **API Token:** It is the token that you generated or retrieved previously as part of the [Requirements](#requirements) section. For instructions, read the official documentation [Manage Okta API tokens](https://help.okta.com/en-us/content/topics/security/api.htm#create-okta-api-token).

**TIP:** Click the **Test connection** button for the **API Token** field to verify Cerby can connect with Okta with the new token.

8. Click the **Done** (<img src="/files/9DmdSabx9gLViEc0RcBO" alt="" data-size="line">) icon. A success message box is displayed.

Now you are done. You and all workspace members can continue syncing their extended accounts with Okta.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cerby.com/setup-and-admin/workspace-settings/extended-account-access/update-the-extended-account-access-settings-for-okta.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.