Okta System Logs connector

Okta System Logs connector is a Databricks data engineering capability, introduced September 2026.

A managed Lakeflow Connect connector that incrementally ingests audit and security events from the Okta System Log into Databricks.

• Everything lands in one table, system_logs - user activity, authentication, security and configuration changes all in a single append-only stream. 🔗
• The SSWS token inherits its creator's permissions, so deactivating that admin quietly affects the pipeline too. 🔗
• Databricks recommends a read-only administrator to own the token, for least-privilege access to the log that records privilege. 🔗

⚠ Limitations: Beta, enabled by a workspace admin from the Previews page. API and bundle authoring only (no UI), SSWS API token only, no row filtering, no SCD type 2 since events are append-only, and no data type changes under schema evolution. 🔗

Category

Data engineering

Introduced

September 2026🔗

Also known as

Okta System Logs, Okta System Log

Verified

2026-10-20