> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-bed-7559-api-key-exp.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta_KeyOf

> JSON Web Key associated with an Okta application

<img noZoom src="https://mintcdn.com/specterops-bed-7559-api-key-exp/Q9Jppg_Pu54SydxZ/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=Q9Jppg_Pu54SydxZ&q=85&s=dab889e863a05e09b1378befc30bbb10" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [Okta\_JWK](/opengraph/extensions/okta/nodes/okta_jwk)
* Destination: [Okta\_Application](/opengraph/extensions/okta/nodes/okta_application)
* Traversable: ✅

## General Information

The traversable Okta\_KeyOf edges represent the relationships between applications [Okta\_Application](/opengraph/extensions/okta/nodes/okta_application) and their JWKs:

```mermaid theme={null}
graph LR
    app1("Okta_Application OktaHound Collector")
    app2("Okta_Application Security Scanner")
    key1("Okta_JWK ABC123")
    key2("Okta_JWK DEF456")
    key3("Okta_JWK GHI789")
    key1 -- Okta_KeyOf --> app1
    key2 -- Okta_KeyOf --> app2
    key3 -- Okta_KeyOf --> app2
```

Possession of the private key corresponding to a JWK allows an attacker to authenticate as the application. The Okta\_KeyOf edge can be used in BloodHound to understand which applications use JWK-based authentication and trace potential attack paths involving compromised private keys.
