Integrations

It connects to what you already have.

OKTO RMM integrates with the tools an IT service provider already uses: the PSAs OKTO PSA, HaloPSA, ConnectWise and Autotask for tickets, the antivirus platforms Bitdefender GravityZone, SentinelOne and Huntress, Microsoft 365, Entra ID and Google Workspace for identity, NextDNS for filtering, Tailscale and RustDesk for access, and Slack, Teams, Discord, PagerDuty and webhooks for alerts.

Every integration below has its own configuration screen in the console. Nothing is “on the roadmap”.

PSA and tickets

How does an alert become a ticket?

OKTO PSA

Our PSA, built to live with the RMM: tickets created by alerts and by the user's assistant, remediation notes posted automatically, asset attached, time counted.

HaloPSA

Tickets and outbound notifications, synchronized assets. The path OKTO used before building its own PSA.

ConnectWise

Connection by API credentials, tickets and organizations.

Autotask

Connection by API credentials, tickets and organizations.

Security

Your antivirus on the same page as the device.

Bitdefender GravityZone

Detections, endpoints, installation packages and organization mapping. Silent deployment through the RMM.

SentinelOne

Device isolation, threat actions, agent sync every 15 minutes and threat sync every 5 minutes.

Huntress

Sync every 15 minutes and an HMAC-SHA256 signed webhook for incidents.

Microsoft Defender

Read natively by the agent: status, signatures, real-time protection, threats, quarantine.

NextDNS

DNS filtering deployed by policy on every device, security events and aggregations in the console.

CIS benchmarks

CIS benchmarks for Windows, macOS and Linux inside the agent, remediation under approval, score kept over time.

Identity

Your users, your tenants, your single sign-on.

Microsoft 365 and Entra ID

Users and tenants synchronized, a monitoring pack for Intune co-management, SSO through Entra ID proven end to end.

Google Workspace

Users and organizations synchronized for clients who live in Google.

SSO OIDC and SAML

Single sign-on with any OIDC or SAML provider, roles assigned at sign-in.

Passkeys and TOTP

Two-factor authentication by app or WebAuthn passkey, enforceable for the whole team.

Remote access and network

The native remote desktop, and two others if your team insists.

OKTO remote desktop

Native WebRTC in the agent, native viewer, in-house TURN relay. Included, no module.

RustDesk

RustDesk server and per-device credentials managed from the console, tool choice in the device menu.

Tailscale

Devices enrolled in your tailnet by policy, status shown on the device page.

SNMP

Templates, devices, metrics and alert thresholds for your switches, UPS units and printers.

Notifications and API

Where your team already reads.

Email and SMS

Alerts and reports by email, critical alerts by text message.

Teams, Slack and Discord

Notification channels per organization or per severity.

PagerDuty and Pushover

For on-call, with escalation and acknowledgement.

External monitoring

Connect your existing monitoring and alerting platforms, per organization, so everything lands in one place.

Webhooks and API

Inbound and outbound webhooks, 1,009 API routes documented in OpenAPI, permission-scoped keys, connected applications.

Questions

What we get asked about integrations.

Which PSA works best with OKTO RMM?

OKTO PSA, because both products are built by the same team: an alert creates a ticket with the device attached, the remediation note comes back into the ticket, and the device assistant opens a help request directly. HaloPSA, ConnectWise and Autotask are supported through API credentials for tickets and organizations.

Do I have to replace my antivirus?

No. Microsoft Defender is read natively by the agent. Bitdefender GravityZone, SentinelOne and Huntress connect through their API: detections, device isolation, threat actions, sync every 5 to 15 minutes. Antivirus deployment is done by script from OKTO RMM.

Can I sign in with Microsoft 365?

Yes, through SSO OIDC or SAML. Entra ID is proven end to end, with role assignment at sign-in. Two-factor authentication by app or passkey can still be enforced on top.

Is there an API?

Yes, 1,009 routes documented in OpenAPI, permission-scoped API keys, OAuth connected applications and inbound and outbound webhooks. Everything the console does, the API does.

An integration is missing from my stack. What happens?

We look at it. The product ships continuously, external monitoring accepts third-party platforms, and webhooks cover most cases in the meantime. Write us what you use.

Something missing?

Tell us what you use. We take a look.

The product ships continuously and the API covers the whole console. A missing integration is discussed with the team that would write it.