Okta Certified Administrator study plan
Okta Certified Administrator · Give each week a clear focus.
8 weeks · About 6 hours per week
User and Group Management
Create a test Okta org and populate it with at least 20 users via CSV import and manual creation.
Configure and apply password policies to different user groups, documenting the precedence rules.
Build a group rule that automatically assigns users based on department attribute, and verify its behavior.
Your checkpoint
A documented lab report with screenshots showing user creation methods, group rule execution, and password policy assignments.
User and Group Management
Set up delegated administration by assigning a help desk admin role with limited scope.
Configure profile mastering for a subset of users and test attribute updates.
Implement group membership rules based on Okta expressions and test edge cases.
Your checkpoint
A working delegated admin scenario with a test user able to perform allowed actions and blocked from others, plus a summary of profile mastering outcomes.
Security Policies
Create and test sign-on policies for different applications, including MFA requirements.
Configure a global session policy and verify timeout and re-authentication behavior.
Set up a password policy with complexity and lockout settings, and test enforcement.
Your checkpoint
A matrix comparing policy outcomes for different user groups and applications, with test evidence.
Security Policies
Implement a multifactor authentication (MFA) policy using Okta Verify and test enrollment flows.
Configure a risk-based policy using behavior detection and test with simulated risky sign-ins.
Set up and test an access policy for a SAML application, including group assignments.
Your checkpoint
A recorded walkthrough (or detailed notes) of MFA enrollment, risk-based policy triggering, and access control for a SAML app.
Advanced Troubleshooting
Use Okta System Log to filter and analyze events for a specific user, identifying authentication failures.
Troubleshoot a SAML assertion issue by inspecting logs and configuration.
Diagnose a provisioning failure in a SCIM integration and document the resolution steps.
Your checkpoint
A troubleshooting journal with three case studies (SAML, SCIM, and sign-in issue) including root cause and fix.
Advanced Troubleshooting
Analyze an OIDC/OAuth 2.0 flow error using logs and token debugging.
Use Okta's admin tools (e.g., factor enrollment reports, API tokens) to resolve a simulated user lockout.
Configure and test a network zone and troubleshoot access issues related to it.
Your checkpoint
A written report detailing the resolution of an OIDC error, a lockout scenario, and network zone misconfiguration.
Okta Administrative Configuration
Configure branding and customization for a sign-in page and email templates.
Set up an inbound SAML federation from a third-party IdP and test SSO.
Create and manage API tokens, and configure a rate limit policy.
Your checkpoint
A customized sign-in page and a working inbound federation setup, with documentation of API token management.
Okta Administrative Configuration & Advanced Troubleshooting
Review and practice troubleshooting scenarios across all domains using sample logs.
Set up a full org-to-org (or app-to-org) integration and validate end-to-end.
Take a practice exam and review weak areas, focusing on advanced configuration and troubleshooting.
Your checkpoint
A comprehensive checklist of administrative configuration tasks and a log of practice exam results with improvement plan.
Milestones
Week 4: Successfully demonstrate user lifecycle management and policy enforcement in a test org, with all deliverables from weeks 1-4 completed.
Week 6: Independently resolve three simulated troubleshooting scenarios using Okta logs and tools, documented in a journal.
Week 8: Achieve a score of at least 80% on a practice exam covering all domains, with a personalized review plan for remaining gaps.