| Push new users |
- You can create new users in Dynatrace when you assign the app to users in Okta.
- Without entitlement management (OIG) enabled, Dynatrace automatically adds new users to the All_Users group.
- With entitlement management (OIG) enabled, you assign users to account groups through entitlements.
- You can create only users whose email domain is verified in your Dynatrace account.
- If the account group assignment fails after Dynatrace creates the user, the integration rolls back the user creation. Okta displays the message "The integration couldn't complete entitlement assignment and rolled back the user to avoid incomplete access."
|
| Push profile updates |
- You can update user profile attributes in Dynatrace when you modify them in Okta.
- You can update the first name and last name. You can't update the username.
|
| Push user deactivation |
- When you deactivate a user or remove their access to the app in Okta, Okta deactivates the user in Dynatrace.
- Deactivation suspends the user's access and prevents them from signing in. Dynatrace keeps the user record.
|
| Import new users |
- Okta imports users from Dynatrace.
- The import includes only users with a verified email domain, even if they're in a pending state.
|
| Push user reactivation |
- When you reactivate a user in Okta, Okta reactivates the user's account in Dynatrace.
|
| Push groups |
- You can push groups and their members to Dynatrace. See Manage Group Push.
- You can update only the group name. Groups that you push from Okta don't support a description field.
- This integration supports only SCIM groups. Push Groups doesn't manage groups that you create directly in the Dynatrace console.
|
| Entitlement Management |
- This app supports entitlement management. Enable this feature if you use Okta Identity Governance.
- Dynatrace has one entitlement type, Account Groups, which is multi-select. Okta imports the existing groups from your Dynatrace account. You can add users to and remove users from these groups through entitlements.
- The list of account groups excludes SCIM groups and groups that have emojis in their names.
- You manage the permissions that are attached to a group in the Dynatrace console, not in Okta.
|