SpecterOps · jeff-matthews · Sep 4, 2026
diff --git a/docs/opengraph/extensions/okta/edges/okta_addmember.mdx b/docs/opengraph/extensions/okta/edges/okta_addmember.mdx
@@ -1,27 +1,24 @@
----
-title: 'Okta_AddMember'
-description: 'Ability to add or remove members in scoped Okta groups'
----
-
-<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
-
-## Edge Schema
-
-- Source: [Okta_User](/opengraph/extensions/okta/nodes/okta_user), [Okta_Group](/opengraph/extensions/okta/nodes/okta_group), [Okta_Application](/opengraph/extensions/okta/nodes/okta_application)
-- Destination: [Okta_Group](/opengraph/extensions/okta/nodes/okta_group)
-- Traversable: ✅
-
-## General Information
-
-The traversable Okta_AddMember edges represent custom role permissions that allow a principal (user, group, or application) to add or remove members in scoped Okta groups. These edges are created when a custom role includes the `okta.groups.members.manage` or `okta.groups.manage` permissions.
-
-
-```mermaid
-graph LR
-    u1("Okta_User john\@contoso.com")
-    g1("Okta_Group Finance")
-    g2("Okta_Group Tier 0 Admins")
-    app1("Okta_Application Automation")
-    u1 -- Okta_AddMember --> g1
-    app1 -- Okta_AddMember --> g2
-```
+---
+title: 'Okta_AddMember'
+description: 'Ability to add or remove members in scoped Okta groups'
+---
+
+<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
+
+## Edge Schema
+
+Traversable: true
+
+## General Information
+
+The traversable Okta_AddMember edges represent custom role permissions that allow a principal (user, group, or application) to add or remove members in scoped Okta groups. These edges are created when a custom role includes the `okta.groups.members.manage` or `okta.groups.manage` permissions.
+
+```mermaid
+graph LR
+    u1("Okta_User john\@contoso.com")
+    g1("Okta_Group Finance")
+    g2("Okta_Group Tier 0 Admins")
+    app1("Okta_Application Automation")
+    u1 -- Okta_AddMember --> g1
+    app1 -- Okta_AddMember --> g2
+```
diff --git a/docs/opengraph/extensions/okta/edges/okta_agentmemberof.mdx b/docs/opengraph/extensions/okta/edges/okta_agentmemberof.mdx
@@ -1,35 +1,32 @@
----
-title: 'Okta_AgentMemberOf'
-description: 'Membership of an Okta agent in an agent pool'
----
-
-<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
-
-## Edge Schema
-
-- Source: [Okta_Agent](/opengraph/extensions/okta/nodes/okta_agent)
-- Destination: [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool)
-- Traversable: ✅
-
-## General Information
-
-Okta_AgentMemberOf edges represent membership of an [Okta_Agent](/opengraph/extensions/okta/nodes/okta_agent) in an [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool).
-
-Active Directory Agent Pools and their agents can be visualized in BloodHound as follows:
-
-
-```mermaid
-graph LR
-    ap1("Okta_AgentPool contoso.com")
-    ap2("Okta_AgentPool adatum.com")
-    a1("Okta_Agent CONTOSO-SRV1")
-    a2("Okta_Agent CONTOSO-SRV2")
-    a3("Okta_Agent ADATUM-SRV1")
-    a1 -- Okta_AgentMemberOf --> ap1
-    a2 -- Okta_AgentMemberOf --> ap1
-    a3 -- Okta_AgentMemberOf --> ap2
-```
-
-<Info>
-Traversable edges between [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) and AD Domain nodes are not modeled in the current version of the Okta BloodHound extension. Support for this is planned for a future release.
-</Info>
+---
+title: 'Okta_AgentMemberOf'
+description: 'Membership of an Okta agent in an agent pool'
+---
+
+<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
+
+## Edge Schema
+
+Traversable: true
+
+## General Information
+
+Okta_AgentMemberOf edges represent membership of an [Okta_Agent](/opengraph/extensions/okta/nodes/okta_agent) in an [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool).
+
+Active Directory Agent Pools and their agents can be visualized in BloodHound as follows:
+
+```mermaid
+graph LR
+    ap1("Okta_AgentPool contoso.com")
+    ap2("Okta_AgentPool adatum.com")
+    a1("Okta_Agent CONTOSO-SRV1")
+    a2("Okta_Agent CONTOSO-SRV2")
+    a3("Okta_Agent ADATUM-SRV1")
+    a1 -- Okta_AgentMemberOf --> ap1
+    a2 -- Okta_AgentMemberOf --> ap1
+    a3 -- Okta_AgentMemberOf --> ap2
+```
+
+<Info>
+Traversable edges between [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) and AD Domain nodes are not modeled in the current version of the Okta BloodHound extension. Support for this is planned for a future release.
+</Info>
diff --git a/docs/opengraph/extensions/okta/edges/okta_agentpoolfor.mdx b/docs/opengraph/extensions/okta/edges/okta_agentpoolfor.mdx
@@ -1,41 +1,37 @@
----
-title: 'Okta_AgentPoolFor'
-description: 'Relationship between an AD agent pool and its backing AD application'
----
-
-<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
-
-## Edge Schema
-
-- Source: [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool)
-- Destination: [Okta_Application](/opengraph/extensions/okta/nodes/okta_application)
-- Traversable: ✅
-
-## General Information
-
-Okta_AgentPoolFor edges connect an AD [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) to the backing [Okta_Application](/opengraph/extensions/okta/nodes/okta_application) used for directory integration.
-
-
-```mermaid
-graph TB
-    subgraph Active Directory
-        d1("Domain contoso.com")
-        c1("Computer CONTOSO-SRV1$")
-        c2("Computer CONTOSO-SRV2$")
-        d1 -- Contains --> c1
-        d1 -- Contains --> c2
-    end
-
-    subgraph Okta
-        ap1("Okta_AgentPool contoso.com")
-        a1("Okta_Agent CONTOSO-SRV1")
-        a2("Okta_Agent CONTOSO-SRV2")
-        app1("Okta_Application AD contoso.com")
-        a1 -- Okta_AgentMemberOf --> ap1
-        a2 -- Okta_AgentMemberOf --> ap1
-        ap1 -- Okta_AgentPoolFor --> app1
-    end
-
-    c1 -- Okta_HostsAgent --> a1
-    c2 -- Okta_HostsAgent --> a2
-```
+---
+title: 'Okta_AgentPoolFor'
+description: 'Relationship between an AD agent pool and its backing AD application'
+---
+
+<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
+
+## Edge Schema
+
+Traversable: true
+
+## General Information
+
+Okta_AgentPoolFor edges connect a directory [Okta_AgentPool](/opengraph/extensions/okta/nodes/okta_agentpool) to the backing [Okta_Application](/opengraph/extensions/okta/nodes/okta_application) used for directory integration.
+```mermaid
+graph TB
+    subgraph Active Directory
+        d1("Domain contoso.com")
+        c1("Computer CONTOSO-SRV1$")
+        c2("Computer CONTOSO-SRV2$")
+        d1 -- Contains --> c1
+        d1 -- Contains --> c2
+    end
+
+    subgraph Okta
+        ap1("Okta_AgentPool contoso.com")
+        a1("Okta_Agent CONTOSO-SRV1")
+        a2("Okta_Agent CONTOSO-SRV2")
+        app1("Okta_Application AD contoso.com")
+        a1 -- Okta_AgentMemberOf --> ap1
+        a2 -- Okta_AgentMemberOf --> ap1
+        ap1 -- Okta_AgentPoolFor --> app1
+    end
+
+    c1 -- Okta_HostsAgent --> a1
+    c2 -- Okta_HostsAgent --> a2
+```
diff --git a/docs/opengraph/extensions/okta/edges/okta_apitokenfor.mdx b/docs/opengraph/extensions/okta/edges/okta_apitokenfor.mdx
@@ -1,31 +1,28 @@
----
-title: 'Okta_ApiTokenFor'
-description: 'User ownership of an Okta API token'
----
-
-<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
-
-## Edge Schema
-
-- Source: [Okta_ApiToken](/opengraph/extensions/okta/nodes/okta_apitoken)
-- Destination: [Okta_User](/opengraph/extensions/okta/nodes/okta_user)
-- Traversable: ✅
-
-## General Information
-
-The traversable Okta_ApiTokenFor edges represent the API token assignments for users in Okta, represented by the [Okta_User](/opengraph/extensions/okta/nodes/okta_user) nodes:
-
-
-```mermaid
-graph LR
-    u1("Okta_User john\@contoso.com")
-    u2("Okta_User steve\@contoso.com")
-    t1("Okta_ApiToken Test App")
-    t2("Okta_ApiToken Postman")
-    t3("Okta_ApiToken Python Script")
-    org("Okta_Organization contoso.okta.com")
-    t1 -- Okta_ApiTokenFor --> u1
-    t2 -- Okta_ApiTokenFor --> u2
-    t3 -- Okta_ApiTokenFor --> u2
-    u2 -- Okta_SuperAdmin --> org
-```
+---
+title: 'Okta_ApiTokenFor'
+description: 'User ownership of an Okta API token'
+---
+
+<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
+
+## Edge Schema
+
+Traversable: true
+
+## General Information
+
+The traversable Okta_ApiTokenFor edges represent the API token assignments for users in Okta, represented by the [Okta_User](/opengraph/extensions/okta/nodes/okta_user) nodes:
+
+```mermaid
+graph LR
+    u1("Okta_User john\@contoso.com")
+    u2("Okta_User steve\@contoso.com")
+    t1("Okta_ApiToken Test App")
+    t2("Okta_ApiToken Postman")
+    t3("Okta_ApiToken Python Script")
+    org("Okta_Organization contoso.okta.com")
+    t1 -- Okta_ApiTokenFor --> u1
+    t2 -- Okta_ApiTokenFor --> u2
+    t3 -- Okta_ApiTokenFor --> u2
+    u2 -- Okta_SuperAdmin --> org
+```
diff --git a/docs/opengraph/extensions/okta/edges/okta_appadmin.mdx b/docs/opengraph/extensions/okta/edges/okta_appadmin.mdx
@@ -1,31 +1,28 @@
----
-title: 'Okta_AppAdmin'
-description: 'Application administrator role assignment'
----
-
-<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
-
-## Edge Schema
-
-- Source: [Okta_User](/opengraph/extensions/okta/nodes/okta_user), [Okta_Group](/opengraph/extensions/okta/nodes/okta_group), [Okta_Application](/opengraph/extensions/okta/nodes/okta_application)
-- Destination: [Okta_Application](/opengraph/extensions/okta/nodes/okta_application), [Okta_ApiServiceIntegration](/opengraph/extensions/okta/nodes/okta_apiserviceintegration)
-- Traversable: ✅
-
-## General Information
-
-The traversable Okta_AppAdmin edges represent Application Administrator role assignments. Application Administrators can manage application configurations, user assignments, and provisioning settings for their assigned applications.
-
-
-```mermaid
-graph LR
-    u1("Okta_User john\@contoso.com")
-    u2("Okta_User alice\@contoso.com")
-    g1("Okta_Group Salesforce Admins")
-    app1("Okta_Application GitHub")
-    app2("Okta_Application Salesforce")
-    is1("Okta_APIServiceIntegration Elastic Agent")
-    u2 -- Okta_MemberOf --> g1
-    u1 -- Okta_AppAdmin --> app1
-    g1 -- Okta_AppAdmin --> app2
-    u1 -- Okta_AppAdmin --> is1
-```
+---
+title: 'Okta_AppAdmin'
+description: 'Application administrator role assignment'
+---
+
+<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
+
+## Edge Schema
+
+Traversable: true
+
+## General Information
+
+The traversable Okta_AppAdmin edges represent Application Administrator role assignments. Application Administrators can manage application configurations, user assignments, and provisioning settings for their assigned applications.
+
+```mermaid
+graph LR
+    u1("Okta_User john\@contoso.com")
+    u2("Okta_User alice\@contoso.com")
+    g1("Okta_Group Salesforce Admins")
+    app1("Okta_Application GitHub")
+    app2("Okta_Application Salesforce")
+    is1("Okta_APIServiceIntegration Elastic Agent")
+    u2 -- Okta_MemberOf --> g1
+    u1 -- Okta_AppAdmin --> app1
+    g1 -- Okta_AppAdmin --> app2
+    u1 -- Okta_AppAdmin --> is1
+```