> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-fetch-json-component.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta_OutboundOrgSSO

> Single sign-on from an Okta application to an external organization

<img noZoom src="https://mintcdn.com/specterops-fetch-json-component/pkiaFEhjWYPnhxMb/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=pkiaFEhjWYPnhxMb&q=85&s=c83d7e4a67c741a979c0e77bf15c1252" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [Okta\_Application](/opengraph/extensions/oktahound/reference/nodes/okta_application)
* Destination: [AZTenant](/resources/nodes/az-tenant), [GH\_Organization](https://github.com/SpecterOps/GitHound), [jamf\_SSOIntegration](https://github.com/SpecterOps/JamfHound), [SNOW\_Account](https://github.com/SpecterOps/SnowHound), [Okta\_IdentityProvider](/opengraph/extensions/oktahound/reference/nodes/okta_identityprovider)
* Traversable: ✅

## General Information

The traversable `Okta_OutboundOrgSSO` edges represent the Single Sign-On (SSO) relationships between Okta applications and supported external organizations or tenants, such as GitHub Enterprise or Jamf Pro, using SAML 2.0 or OIDC protocols.

```mermaid theme={null}
graph LR
  subgraph okta["OktaHound"]
    direction TB
    o("Okta_Organization contoso.okta.com")
    app1("Okta_Application GitHub Enterprise Cloud")
    app2("Okta_Application Jamf Pro SAML")
    o -- Okta_Contains --> app1
    o -- Okta_Contains --> app2
  end
  subgraph "GitHound"
    direction TB
    ghorg("GH_Organization Contoso")
    app1 -- Okta_OutboundOrgSSO --> ghorg
  end
  subgraph "JamfHound"
    direction TB
    jamf("jamf_SSOIntegration contoso.jamfcloud.com-SSO")
    app2 -- Okta_OutboundOrgSSO --> jamf
  end
```

The respective BloodHound collectors, e.g., `GitHound` for GitHub organizations and `JamfHound` for Jamf Pro tenants,
must be used to gather the external node information.