Okta Max

See every Okta setting.

Okta Max gives read-only admins the hidden settings Okta hides behind an Edit button, a private AI assistant, an API console and dark mode, all inside the admin console you already use.

Add to Chrome, it's free View source
Okta's Authenticators page side by side: as a read-only admin with no Actions menu, and with Okta Max's Actions menu and its View option
Built for read-only admins

Read-only shouldn't mean in the dark

Plenty of teams manage Okta as code. Every change goes through Terraform and a reviewed pull request, so nobody gets an edit role in the console, not even the engineers who write the config. But Okta's Read-Only Administrator role hides much of that configuration, because many settings only show up in the Edit dialog.

Okta Max puts a 👁 wherever Okta leaves out Edit. It opens the exact form you'd get as a super admin, with every field locked, using the API access you already have. Check what's live without breaking GitOps.

  • App assignments, with the groups behind them by priority
  • SAML settings
  • Group rules and network zones
  • Authentication, global session and password policy rules
  • Authenticator settings, even where Okta hides the Actions menu
  • The raw API response, for the fields no form shows
  • Auditors, help desk and security reviewers find answers on their own
  • Still read-only: your role doesn't change, and Okta itself rejects any change you try
View User Assignment dialog showing the groups a user is assigned through, by priority
AI assistant New

Bring your own AI assistant into Okta

Ask your org a question in plain English and get the answer right next to the page you're on. You control the data from start to finish: run it on-device with Gemini Nano, the AI built into Chrome, or deploy the example server to your own infrastructure.

  • On-device: Gemini Nano and Okta's MCP server run inside Chrome. No server, no keys, and nothing leaves your computer.
  • Your server: deploy Claude, or any model, to your own infrastructure for multi-step answers and tables, across every org. Set it up
  • Includes a hosted MCP server for Okta any client can use
  • Sends context of the current page you're on
The Okta assistant panel, labeled On-device, answering which users are locked out
API console

The Okta API, right where you work

Pull up the API drawer on any admin console page, or press Ctrl + `. It's already signed in as you, so there's no token to create and nothing to paste. Go from question to data in seconds.

  • Endpoint suggestions straight from Okta's API reference
  • IDs filled in from the page: on a user's page, {userId} is that user
  • Pretty, table, raw and header views
  • Paging, one-click CSV export of every page, and request history
The API console drawer showing GET /api/v1/users as a table
Dark mode

Easy on the eyes, all day long

A dark mode for the entire admin console. Choose between Light, Dark, or follow the system color scheme.

A read-only View Rule dialog for a group rule in dark mode

Your data stays yours

Okta Max lives entirely in your browser and environment. It uses your session to authenticate to Okta. No accounts, no cloud, no catch.

Read the privacy policy

Up and running in a minute

Add to Chrome, it's free
For IT

Admin-managed policies

Manage configurations for Okta Max through Chrome policies, and enforce settings for your organization. 

{ "chatServerUrl": "https://oktamax.example.com" }
See managed policies