The 33 Okta security checks Black Cat runs
Black Cat SSPM evaluates 33 security policies against your Okta configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.
How to connect Okta — what access Black Cat needs, and why.
Identity, MFA & sign-in
5 checks · highest severity: high
Access control & privilege
21 checks · highest severity: high
Configuration hardening
7 checks · highest severity: medium
Identity, MFA & sign-in (5)
- Admin Without MFA severity: high
- MFA Not Enrolled severity: high
- Phishing Resistant MFA Factors severity: medium
- Session MFA Not Required severity: medium
- Phishing Resistant Auth Policies severity: medium
Access control & privilege (21)
- Dormant Accounts severity: medium
- Dormant Super Admins severity: high
- Weak Password Policy severity: high
- Weak Account Lockout severity: medium
- Session Idle Timeout Too Long severity: medium
- Session Lifetime Too Long severity: medium
- App Not Using Federated Auth severity: medium
- App With Individual User Assignments severity: medium
- OAuth App Broad Scopes severity: high
- OAuth App Inactive With Grants severity: medium
- OAuth App AI With Broad Access severity: medium
- Access Policy Default Not Deny severity: high
- Super Admin API Tokens severity: high
- Super Admin Count Excessive severity: medium
- Super Admin Redundancy Missing severity: high
- Admin API Token Usage severity: high
- User Account Suspended severity: low
- User Account Locked Out severity: medium
- Excessive Total Admin Accounts severity: medium
- Stale API Token severity: medium
- Old API Token severity: low
Configuration hardening (7)
- Password Policy No Symbol Requirement severity: medium
- Password Policy No Username Exclusion severity: medium
- Account Lockout Auto-Unlock Too Fast severity: medium
- Inactive Application severity: low
- ThreatInsight Not Blocking severity: medium
- ThreatInsight Excluded Zones severity: low
- Anonymizer Block Absent severity: medium