Okta Privileged Access and Access Certification – Getting Roles into the Group Description

As with many SaaS applications in Okta, application entitlement can be managed via Okta Groups pushed to Okta Privileged Access (OPA). This means membership in OPA policies and roles is based on Okta Group membership and thus can be governed by access requests and access certification for those groups. In this article we look at … Continue reading Okta Privileged Access and Access Certification – Getting Roles into the Group Description →

OIG Access Requests – Automate Out of Country Requests and Security

Overview The purpose of this post is to configure an access request for end users to request when they are going to be out of the country. Oftentimes, IT teams like to lock down their environment so their employees can only access their applications from one designated country or area (maybe we call this US … Continue reading OIG Access Requests – Automate Out of Country Requests and Security →

Okta Privileged Access and the Reports API – Who has Access to What and How?

With the release of Okta Privileged Access, an API has also been released to provide programmatic access into objects managed by it, such as servers, secrets and gateways. There is a set of Access Reports APIs to allow for external reporting on who has access to what and how. This article explores the APIs, the … Continue reading Okta Privileged Access and the Reports API – Who has Access to What and How? →

Okta enrolled factor verification tool for Helpdesk to reset password/factors using Okta workflows and Slack modal

Prerequisite: Okta Workforce Identity Cloud tenant. Okta Workflows Console Access Okta Admin Access to Okta Admin Dashboard Slack workspace and Admin access Problem statement: Okta enables selfservice to reset your password. This requires some high assurance factor for verification. Also some times they need to reset factors which does not have a way to do … Continue reading Okta enrolled factor verification tool for Helpdesk to reset password/factors using Okta workflows and Slack modal →

OKTA Workflows : the best is yet to come

In my previous article, I gave you a brief introduction to Okta workflows, in order to arouse your curiosity as to the potential of this tool. On the face of it, if you’re here, that’s the case (if you’ve seen the light and gone in, that’s good too!). Today, I’m going to take the presentation … Continue reading OKTA Workflows : the best is yet to come →

Introduction to OKTA Workflows: nothing is impossible (almost)!

A test workflow from one of our tenants If you’re here, you probably know what Okta is. But if you don’t, we won’t hold it against you (promise!). Okta offers an IAM (Identity Access Management) solution, enabling you to centrally and securely manage your users’ identities and access to the resources they need to access. … Continue reading Introduction to OKTA Workflows: nothing is impossible (almost)! →

OIG Access Requests – Can I Attach a File?

A common requirement for access requests is adding a file to support the request. It may not be obvious, but Okta Identity Governance has the means to attach a file to a request. Let's explore this and show an example. How to Attach a File in the Access Requests Portal A file can be attached … Continue reading OIG Access Requests – Can I Attach a File? →

OIG Access Requests and Workflows – Checking SoD In An Access Request

This article looks at a new approach you could use to perform Separation of Duties (SoD) checking from Okta Access Requests using Okta Workflows. It shows two approaches you could take to get SoD analysis into the request a soon as it's raised so that the reviewer has the information at hand before approving the … Continue reading OIG Access Requests and Workflows – Checking SoD In An Access Request →

OIG Access Requests – Posting Additional Information into a Request

This article looks at a recent addition to the Okta Identity Governance (OIG) Access Request API that allows updating of in-flight access requests and can be used to add additional data to help reviewers review requests. Overview of the IntegrationAn Example Request With Additional InformationThe Mechanics of the IntegrationNew Requests API CallAccess Request Created Event … Continue reading OIG Access Requests – Posting Additional Information into a Request →

OIG Access Requests – Calling an Okta Workflow from Within a Request Type

For some time there has been the ability to trigger a workflow in Okta Workflows from a request flow in Okta Access Requests via events written to the Okta System Log. Events were created for a request being initiated and being closed. But this approach has some limitations, such as a lot of processing within … Continue reading OIG Access Requests – Calling an Okta Workflow from Within a Request Type →