SOC2 Audit: Need a lists of users from various OKTA applications to submit for evidence.

chjlarson

For the SOC2 audit, we need lists of users from various OKTA applications to submit for evidence. 

Can you help us obtain a list of OKTA application users via JupiterOne? Specifically, 

• Amazon Web Services
• GCP
• Github
• Jira
• Cloudflare
• Jamf
• Code42
• New Relic

Thank you!

dcpeach

This query is likely the one you're going to be looking for is as follow:

find UNIQUE User as u 
(that has UserGroup as g)? 
that Assigned okta_application as a 
return u.displayName, a.displayName as app ORDER BY app ASC

This query will get you your list of Okta Apps:

find okta_application

If you know the app, you can then filter by property and get a list of users for that individual app too:

find UNIQUE User as u 
(that has UserGroup as g)? 
that Assigned okta_application with displayName = "New Relic" as a 
return u.displayName, a.displayName as app ORDER BY app AS