Okta_AgentPool

A pool of synchronization or authentication agents in Okta

Overview

The Okta_AgentPool nodes represent Okta Agent Pools, which are collections of Okta Agents (represented as Okta_Agent nodes) that work together to provide high availability and load balancing for on-premises integrations.

The following agent pool types are supported by Okta:

Agent Pool Type	Description
AD	Active Directory
IWA	Integrated Windows Authentication (Kerberos/NTLM)
LDAP	Lightweight Directory Access Protocol
RADIUS	RADIUS authentication proxy
MFA
OPP
RUM

The most common agent pool type is the Active Directory (AD) Agent Pool, which consists of one or more AD Agents that facilitate bi-directional object synchronization between Okta and on-premises Active Directory environments.

Edges

The tables below list edges defined by the Okta extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
Okta_AgentMemberOf	Okta_Agent	✅
Okta_Contains	Okta_Organization	✅

Outbound Edges

Edge Type	Destination Node Types	Traversable
Okta_AgentPoolFor	Okta_Application	✅

Properties

Name	Source	Type	Description
id	agentPool.id + "_pool"	string	Unique agent pool identifier.
name	agentPool.name	string	Name of the Okta agent pool.
displayName	agentPool.name	string	Display label used in BloodHound.
oktaDomain	Collector context (non-API)	string	Okta organization domain where the agent pool exists.
operationalStatus	agentPool.operationalStatus	string	Current health/operational state of the agent pool.
type	agentPool.type	string	Agent pool type (for example AD, LDAP, IWA, RADIUS).

Active Directory (AD) agent pool identifiers have the same values as the identifiers of the corresponding application objects. The _pool suffix is therefore added to the id property of Okta_AgentPool nodes to ensure uniqueness of node identifiers in BloodHound.

Sample Property Values

id: 0oaxg9rhdd7ncGCXv697_pool
name: contoso.local
displayName: contoso.local
oktaDomain: contoso.okta.com
operationalStatus: DISRUPTED
type: AD