This doesn't seem to work... we've followed the instructions provided with the TA, but we're getting errors output from the scripts to the effect of basic tokens missing. Also reaching out to Okta support directly.
2020-07-10 15:33:13,487 ERROR pid=21467 tid=MainThread file=setup_util.py:log_error:110 | Credential account with username <our okta> can not be found
OK, seems normal to me. It attempts the API call, but what does cim_actions have to do with it? Yes, we have CIM installed, and the add-on is good for all versions.
2020-07-10 15:33:13,487 ERROR pid=21467 tid=MainThread file=cim_actions.py:message:424 | sendmodaction - worker="$HOSTNAME" signature="Error: 'NoneType' object has no attribute '__getitem__'. Please double check spelling and also verify that a compatible version of Splunk_SA_CIM is installed." action_name="oktaGroupMemberChange" search_name="<search name>" sid="scheduler__admin_VEEtT2t0YV9JZGVudGl0eV9DbG91ZF9mb3JfU3BsdW5r__RMD5784129dd80607623_at_1594409520_68739" rid="6" app="TA-Okta_Identity_Cloud_for_Splunk" user="admin" digest_mode="0" action_mode="saved" action_status="failure"
Error code 4... nothing more than that. The part of the script where that error is thrown is related to gathering parameters. I suspect that maybe this is implemented, but never tested or confirmed to work. But I could be wrong...