Before you start
- Okta is connected as a directory in Settings > General > Directory Integrations. See the Okta integration page for setup.
- The application is set up in Okta and assigned through Okta groups (via SCIM or SAML).
Connect an application with Okta
Adding an Okta-managed application
1
Add the application
Go to Applications, click New Application, and select your application from the list.
If your application is not listed, use create a custom Okta-integrated application below the search field.
2
Choose the Okta integration
On the Choose Integration step, click Connect under Manage by Okta.
3
Enter details
Assign a Business Owner and, optionally, Application Admins. Leave Is requestable? checked so your users can request access through AccessOwl. Click Next.
4
Name the permissions
The application’s Okta groups are pulled in automatically as selectable permissions. Give each group a display name your users will understand, for example the group
1password-user becomes “User”. Add further groups with Add other permission.5
Save
Click Save. The application is now managed through Okta.
How access works after setup
- When an access request is approved, AccessOwl adds the user to the linked Okta group and Okta provisions the account.
- When access is revoked or the user is offboarded, AccessOwl removes the user from the Okta group and Okta deprovisions the account.
- Each linked Okta group is a separate permission in AccessOwl, so one application can offer multiple access levels, for example “User” and “Admin”.