Okta Unbound

About

Okta Unbound is a productivity tool for Okta administrators who need more powerful group and user management capabilities than the default Okta admin console provides. It runs as a Chrome side panel alongside your existing Okta admin session.

WARNING: This extension is still in a beta stage and has features that may contain bugs. By using this extension you understand that you do so at your own risk. If bugs or other issues are present please open an issue on GitHub.

Key Features:

- Context-Aware Overview — Automatically detects whether you're viewing a group or user page in Okta and surfaces relevant insights in the side panel.
- Group Management — Search groups with hybrid live/cached search, filter by type and size, multi-select groups, and export results to CSV or JSON.
- User Search & Membership Analysis — Look up users and analyze their group memberships, with clear distinction between rule-based and directly assigned groups.
- Group Rules Inspector — View and inspect group rules with automatic conflict detection to help prevent misconfigurations.
- Audit Trail — All operations are logged locally using IndexedDB for accountability and troubleshooting. Audit logs store Okta user IDs (not email addresses) for privacy.
Privacy & Security:
- No data is collected, transmitted, or shared with any external server.
- No analytics, telemetry, or tracking of any kind.
- All processing happens entirely within your browser.
- No API keys or credentials are stored — the extension uses your existing authenticated Okta session.
- Preferences and cache are stored locally using chrome.storage.local.


Who is this for?

Okta administrators who manage large numbers of groups, users, and group rules. Okta Unbound provides bulk operations, advanced search, and visibility into rule conflicts that are not available in the standard Okta admin console.


How it works:

Okta Unbound operates as a side panel that communicates with the Okta admin console tab you already have open. A content script running on Okta domains reads the current page context and authenticates API requests using your existing session — no separate login or API key is required. All API calls go directly from your browser to your Okta tenant. Nothing passes through any intermediary server.