The Combined Power of Okta Privileged Access and Okta Identity Governance

This article looks at the benefits of combining Okta Privileged Access with Okta Identity Governance to reduce the risk of using privileged accounts and access. IntroductionUsing Okta Identity Governance to Enhance Okta Privileged AccessJust-in-time Access ApprovalAccess Requests for OPA AccessAccess Certification for OPA AccessEnhancing the Information Available to ReviewersLeveraging Okta WorkflowsSaaS Service Accounts and OIN … Continue reading The Combined Power of Okta Privileged Access and Okta Identity Governance →

New Features for the Access Request Conditions and Resource Catalog in Okta Identity Governance

Two new features have been introduced into the Access Request Conditions and Resource Catalog (aka RCAR) feature in Okta Identity Governance - Request on Behalf Of, and User-specified Access Duration. This article introduces these new features. Request On Behalf Of Okta Identity Governance introduced the ability to request access on behalf of another user into … Continue reading New Features for the Access Request Conditions and Resource Catalog in Okta Identity Governance →

Active Directory Bidirectional Group Management

Description: This document describes how to set up Access Requests and Certification for AD-sourced groups imported into Okta. Pre-requisites: IGA license to manage AD groups in Okta. Active Directory integrated with Okta and proper service account permissions to manage groups in AD. Refer to “Group Push” permissions in this document: https://help.okta.com/en-us/content/topics/directory/ad-agent-about-service-account.htm All the user's managerID … Continue reading Active Directory Bidirectional Group Management →

Customisable Access Certification Reviewer Content in OIG

This article looks at the new customisable reviewer content in Okta Identity Governance (OIG) Access Certifications. IntroductionEnabling the New FeatureConfiguration of the New FeatureReview Summary ChangesFiltersSort OptionColumn ResizingChanging the ColumnsReview Details ChangesConclusion The doc link for this new feature is https://help.okta.com/oie/en-us/content/topics/identity-governance/access-certification/iga-ac-customizable-context.htm. Introduction Access Certification (or recertification, attestation) is a key capability in any Identity Governance … Continue reading Customisable Access Certification Reviewer Content in OIG →

Govern Okta Admin Roles (free version of Okta Identity Governance*)

*This new feature is included in the Okta WIC platform and all Okta workforce customers are entitled to use it! It is governance just for the Okta admin roles, not all IGA use cases. We started gradual roll out, soon every workforce customer will be able to see it in their preview orgs. TL;DR - … Continue reading Govern Okta Admin Roles (free version of Okta Identity Governance*) →

Managing Access in Okta Privileged Access with the new OIG Resource Catalog

Okta has released into Early Access a new feature called the Access Request Conditions and Resource Catalog, or more simply the Resource Catalog. This is a new way to configure and use access requests in Okta Identity Governance. This article shows how this can be applied to access within Okta Privileged Access. IntroductionA Quick Revision … Continue reading Managing Access in Okta Privileged Access with the new OIG Resource Catalog →

Privileged Access Management for AWS using Okta Workforce Solutions

This article is a summary of a presentation I recently gave looking at Okta Workforce Identity Cloud and Amazon Web Services (AWS). It is focused on how privileged access management can be applied to AWS users and access, leveraging the different Identity and Access Management (IAM) capabilities in Okta. IntroductionAccess Management and AWS PrivilegesIdentity Administration, … Continue reading Privileged Access Management for AWS using Okta Workforce Solutions →

OIG APIs – Use Okta Connector in Workflows Now

This short post is for the information of people who may look at some of the older OIG API and Workflows articles on this site and find they no longer work. You should be using the Okta Connector with the Custom API Action card now instead of the old generic API Connector card. The OLD … Continue reading OIG APIs – Use Okta Connector in Workflows Now →

Okta Workflow for Access Certifications – Slack Notifications

Introduction Today, ensuring the security and compliance of user access rights is a top priority for organizations worldwide. As an advocate for streamlined processes and effective communication, I am excited to share with you a custom-built Okta Workflow to send Access Certifications campaign notifications like campaign launch, weekly campaign reminders to reviewers who are yet … Continue reading Okta Workflow for Access Certifications – Slack Notifications →

Okta Entitlements for Disconnected Applications – Dynamic Entitlement Bundle Assignments

OVERVIEW This blog is a continuation of the Okta Entitlements for Disconnected Applications - Dynamic Entitlement Bundle Creation that I posted previously. Some of the introductory content is duplicate to reenforce some of the basic concepts around Okta Identity Governance – Entitlement Management.With the release of Okta Identity Governance, one of the newly released features is entitlements … Continue reading Okta Entitlements for Disconnected Applications – Dynamic Entitlement Bundle Assignments →