The Okta API token. This is required to query Okta for user group membership. If this is not supplied only locally configured groups will be enabled.