Home
Connect identity sources of truth
Learn how to connect ClearID to external sources of truth for identities.
Synchronizing identities using Okta
Synchronize identity information from Okta with ClearID.
Understanding Okta synchronization
Okta synchronization connects Okta to Genetec ClearID™ and automatically synchronizes users, groups, and selected attributes between the two systems.

Welcome to ClearID
Learn about the ClearID self-service physical access management solution.
Deployment overview
Check your compatibility and deployment requirements.
Familiarize yourself with the ClearID web portal
Learn how to use the basic features of the ClearID web portal.
Define global account settings
Learn how to configure and customize ClearID web portal settings.
Connect ClearID to Security Center
Learn how to connect ClearID to Security Center.
Connect identity sources of truth
Learn how to connect ClearID to external sources of truth for identities.
- Identity provisioning overview
  Learn about synchronizing ClearID with external identity management systems.
- Synchronizing identities using Okta
  Synchronize identity information from Okta with ClearID.
  - Understanding Okta synchronization
    Okta synchronization connects Okta to Genetec ClearID™ and automatically synchronizes users, groups, and selected attributes between the two systems.
  - Synchronizing identities using Okta
    To map external system attributes to internal identity profiles, Account administrators and IT security personnel can synchronize identities using Okta in Genetec ClearID™.
  - Adding an Okta synchronization configuration
    To enable identity synchronization between Okta and Genetec ClearID™, Account administrators must first add a new synchronization configuration in the ClearID portal.
  - Retrieving your Okta synchronization public key
    To configure your Okta application and synchronize identity information between Okta and Genetec ClearID™, Account administrators and IT security personnel must retrieve the public key from the ClearID portal.
  - Configuring group and user resources in Okta
    To synchronize identity information between Okta and Genetec ClearID™, Account administrators and IT security personnel must configure the group and user resources in Okta that ClearID can access.
  - Creating an administrator role in Okta
    To synchronize identity information between Okta and Genetec ClearID™, Account administrators and IT security personnel must create an administrator role in Okta. The administrator role must be configured with the correct permissions for ClearID to read Okta users and groups.
  - Creating an Okta application
    To synchronize identity information between Okta and Genetec ClearID™, Account administrators and IT security personnel must create an application in Okta to obtain connection credentials.
  - Assigning the administrator role and resources to the Okta application
    To ensure that the portal has the access rights to synchronize identity information between Okta and Genetec ClearID™, Account administrators and IT security personnel must connect the administrator role and resource set to the Okta application.
  - Configuring the Okta connection
    To enable identity synchronization between Okta and Genetec ClearID™, Account administrators and IT security personnel must connect an Okta application to the ClearID portal.
  - Configuring Okta groups
    To define how group data flows between Okta and Genetec ClearID™, you must add your group configuration settings.
  - Configuring Okta identity field mappings
    To define how identity data flows between Okta and Genetec ClearID™, you must configure your identity field mappings.
  - Configuring Okta credential mappings
    To define how credential data flows between Okta and Genetec ClearID™, you must configure your credential mappings.
  - Configuring Okta management settings
    To control how and when information is synchronized between Okta and Genetec ClearID™, you can configure the management settings in the ClearID portal.
  - Viewing Okta synchronization logs
    To review synchronization-related activities for auditing or troubleshooting purposes, Account administrators can view Okta synchronization logs in Genetec ClearID™.
- Synchronizing identities using Microsoft Entra ID
  Synchronize identity information from Microsoft Entra ID with ClearID.
- Synchronizing identities using Cloud CSV
  Synchronize identity information from exported CSV files with ClearID.
- Synchronizing identities using an API
  Code your own solution for synchronizing identity information from external systems with ClearID.
- Synchronizing identities using SCIM
  Synchronize external system attributes with ClearID using the System for Cross-domain Identity Management (SCIM) integration.
- Synchronizing identities using One Identity Synchronization Tool
  Import identity information from an external system into ClearID using the One Identity Synchronization Tool.
- Synchronizing identities using LDAP
  Synchronize Active Directory (AD) Lightweight Directory Access Protocol (LDAP) attributes into ClearID using the LDAP Synchronization Agent.
Synchronize and manage credentials
Learn how to synchronize credentials with ClearID.
Set up sites
Learn how to add and manage sites.
Set up areas
Learn how to add and manage areas.
Set up roles
Learn how to add roles and manage access.
Audit access
Learn how to schedule, complete, and verify access reviews.
Automate API communication
Learn how to automate API communication with webhooks.
Manage identities
Learn how to add identities and manage their permissions.
Connect kiosks and printers
Learn how to connect visitor management devices to ClearID.
Create and approve requests
Learn how to make and approve access, identity, and role membership requests.
Invite and manage visitors
Learn how to invite visitors and manage their access.
Monitor and optimize your ClearID system
Learn how to monitor and optimize your ClearID system.
Glossary

Understanding Okta synchronization

2026-09-03

Okta synchronization connects Okta to Genetec ClearID™ and automatically synchronizes users, groups, and selected attributes between the two systems.

How synchronization works

During synchronization, Okta acts as the identity source of truth for ClearID.

If Okta Event Hooks are enabled, changes are synchronized in real time. New users, updates to existing users, and group membership changes are automatically reflected in ClearID.

To import users and groups correctly, the synchronization configuration maps Okta objects to their ClearID equivalents:


Okta	ClearID
Users	Identities
Groups	Roles
Profile attributes	Identity fields

Requirements for Okta synchronization

To connect Okta to the ClearID web portal, you need the following information:

Okta domain
Client ID

Before you can synchronize data with ClearID, an external system administrator (IT or security personnel) must configure the required permissions, resources, and API scopes in Okta.

Permissions define the administrative authority that ClearID has in Okta and the actions that the integration can perform.
Resource sets define the groups, users, applications, and other resources to which the permissions apply.
API scopes define which resources ClearID can access and the actions that it can perform in an Okta tenant.