# Okta with Quicksight **URL:** \ **Category:** Q&A\ **Tags:** developer, okta, quick-sight\ **Created:** [September 22, 2025, 4:37pm UTC](https://community.amazonquick.com/t/okta-with-quicksight/49783 "2025-09-22T16:37:37Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![larry](https://avatars.discourse-cdn.com/v4/letter/l/47e85d/32.png) [@larry](https://community.amazonquick.com/u/larry)\ **Post date:** [September 22, 2025, 4:37pm UTC](https://community.amazonquick.com/t/okta-with-quicksight/49783/1 "2025-09-22T16:37:37Z")
Hi, I am a bit confused about this Integration. Say, here is what I have and my client is requesting a seamless integration with minimal code and maintenance. 1 All the Identities who will be accessing Quick Sight are in Okta so it SAML federated Identities. 2 We would like that all users who use the Okta -QS App should be auto registered with Quicksight using the email address which they used to Authenticate. I am using the following document - 1. [Tutorial: Amazon QuickSight and IAM identity federation - Amazon QuickSight](https://docs.aws.amazon.com/quicksight/latest/user/tutorial-okta-quicksight.html) but I get confused when I see this blog – > **[Simplify business intelligence identity management with Amazon QuickSight and...](https://aws.amazon.com/blogs/business-intelligence/simplify-business-intelligence-identity-management-with-amazon-quicksight-and-aws-iam-identity-center/)** > > April 2025: This post was reviewed and updated for accuracy. Amazon QuickSight is now an AWS IAM Identity Center enabled application. This capability allows administrators that subscribe to QuickSight to use IAM Identity Center to enable their users... Do I really need to develop lambda to automate and implement this process. Appreciate some clarification. Thanks ! ---
**Author:** ![Deep](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/deep/32/14783_2.png) [@Deep](https://community.amazonquick.com/u/Deep)\ **Post date:** [September 22, 2025, 6:15pm UTC](https://community.amazonquick.com/t/okta-with-quicksight/49783/2 "2025-09-22T18:15:57Z")
Hello Lary, you may refer to this [Federate Amazon QuickSight access with Okta | AWS Business Intelligence Blog](https://aws.amazon.com/blogs/business-intelligence/federate-amazon-quicksight-access-with-okta/) Hope this helps. Cheers, Deep ---
**Author:** ![larry](https://avatars.discourse-cdn.com/v4/letter/l/47e85d/32.png) [@larry](https://community.amazonquick.com/u/larry)\ **Post date:** [September 22, 2025, 6:38pm UTC](https://community.amazonquick.com/t/okta-with-quicksight/49783/3 "2025-09-22T18:38:04Z")
Hi @Deep, Thanks for your quick response. Before I start the work, Is it mandatory to do this – “Creating an AWS access key for Okta”. If we are using a Federated user and selecting a role – this step can be avoided ? Can you pl suggest ? Thanks again, ---
**Author:** ![Deep](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/deep/32/14783_2.png) [@Deep](https://community.amazonquick.com/u/Deep)\ **Post date:** [September 23, 2025, 9:09am UTC](https://community.amazonquick.com/t/okta-with-quicksight/49783/4 "2025-09-23T09:09:45Z")
Hello Larry, No, you need to have the access key - you need to create an AWS user with specific permissions so Okta can dynamically fetch a list of available roles from your accounts. This makes assigning users and groups to specific AWS roles easy and secure for administrators. - The access key is associated with an IAM user that has permissions to assume the necessary IAM roles - This enables Okta to assume the appropriate roles for Quick Sight federation Hope this helps. Cheers, Deep ---
**Author:** ![larry](https://avatars.discourse-cdn.com/v4/letter/l/47e85d/32.png) [@larry](https://community.amazonquick.com/u/larry)\ **Post date:** [September 23, 2025, 11:03am UTC](https://community.amazonquick.com/t/okta-with-quicksight/49783/5 "2025-09-23T11:03:12Z")
@Deep A lot of clients may not allow the creation of access keys. I understand that the users who are part of an OKTA group have to pre-provisioned in Quick Sight. Is this the place where a scheduled Lambda can read from the Okta group and populate Quick Sight ? Pl confirm. Is there a sample code which I can use ? Thanks ! ---
**Author:** ![Deep](https://d2orw1595917va.cloudfront.net/user_avatar/community.amazonquick.com/deep/32/14783_2.png) [@Deep](https://community.amazonquick.com/u/Deep)\ **Post date:** [September 23, 2025, 11:34am UTC](https://community.amazonquick.com/t/okta-with-quicksight/49783/6 "2025-09-23T11:34:07Z")
Hello Larry, No, you manage the users in Okta not in Quick Sight. Okta is your identity provider. the access key enables okta to assume appropriate roles. Please refer - [here](https://docs.aws.amazon.com/quicksight/latest/user/tutorial-okta-quicksight.html) for more info Hope this clears your doubt. Cheers, Deep