> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-fetch-json-component.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta_KeyOf

> JSON Web Key associated with an Okta application

<img noZoom src="https://mintcdn.com/specterops-fetch-json-component/pkiaFEhjWYPnhxMb/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=pkiaFEhjWYPnhxMb&q=85&s=c83d7e4a67c741a979c0e77bf15c1252" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [Okta\_JWK](/opengraph/extensions/oktahound/reference/nodes/okta_jwk)
* Destination: [Okta\_Application](/opengraph/extensions/oktahound/reference/nodes/okta_application)
* Traversable: ✅

## General Information

The traversable `Okta_KeyOf` edges represent the relationships between applications ([Okta\_Application](../nodes/okta_application)) and their JWKs:

```mermaid theme={null}
graph LR
    app1("Okta_Application OktaHound Collector")
    app2("Okta_Application Security Scanner")
    key1("Okta_JWK ABC123")
    key2("Okta_JWK DEF456")
    key3("Okta_JWK GHI789")
    key1 -- Okta_KeyOf --> app1
    key2 -- Okta_KeyOf --> app2
    key3 -- Okta_KeyOf --> app2
```

Possession of the private key corresponding to a JWK allows an attacker to authenticate as the application.
The `Okta_KeyOf` edge can be used in BloodHound to understand which applications use JWK-based authentication and trace potential attack paths involving compromised private keys.