Skip to main content
If an application is assigned to your users through Okta, you can connect it in AccessOwl as an Okta-managed application. AccessOwl then grants and revokes access by adding or removing users from the application’s Okta groups, and Okta’s SCIM or SAML integration handles the actual account provisioning and deprovisioning. AccessOwl never changes accounts inside the application itself.

​
Before you start

  • Okta is connected as a directory in Settings > General > Directory Integrations. See the Okta integration page for setup.
  • The application is set up in Okta and assigned through Okta groups (via SCIM or SAML).

​
Connect an application with Okta

1

Add the application

Go to Applications, click New Application, and select your application from the list.
If your application is not listed, use create a custom Okta-integrated application below the search field.
2

Choose the Okta integration

On the Choose Integration step, click Connect under Manage by Okta.
3

Enter details

Assign a Business Owner and, optionally, Application Admins. Leave Is requestable? checked so your users can request access through AccessOwl. Click Next.
4

Name the permissions

The application’s Okta groups are pulled in automatically as selectable permissions. Give each group a display name your users will understand, for example the group 1password-user becomes “User”. Add further groups with Add other permission.
5

Save

Click Save. The application is now managed through Okta.

​
How access works after setup

  • When an access request is approved, AccessOwl adds the user to the linked Okta group and Okta provisions the account.
  • When access is revoked or the user is offboarded, AccessOwl removes the user from the Okta group and Okta deprovisions the account.
  • Each linked Okta group is a separate permission in AccessOwl, so one application can offer multiple access levels, for example “User” and “Admin”.

​
Switching an existing application to Okta

If an application is already connected through an integration account, disconnect that integration first. Then reconnect the application and choose Manage by Okta on the Choose Integration step.