Okta Identity Governance release notes

Generally Available features

Governance Analyzer recommendation update

The Governance Analyzer recommendation Revoke has been renamed to Review to clearly indicate the action that reviewers should take for a review item in a campaign.

New input type for questions in request type

While adding questions in a request type, you can now specify the input type as Date and Time for users. This gives you more control over when access to a resource begins or ends. See Question settings.

Early Access features

Certify unmanaged accounts

Certify unmanaged accounts using access certification campaigns to help reduce drifts in access between Okta and the downstream app. See Certify unmanaged accounts.

You can also use imported app user attributes to further refine the campaign scope (managed or unmanaged resources) for resource campaigns, giving you more visibility and control. See Okta Expression Language examples.

Additionally, the Discover inactive users preconfigured campaign has been renamed to User activity review to avoid confusion.

This is an Early Access release.

Fixes

• Some column headers on the Access Certifications campaign page in the Admin Console appeared truncated, and the option to resize the column was missing. (OKTA-1259416)

• Access Requests that assigned a user to a non-Entitlement Management enabled app reported success. However, they didn't assign the user if the user previously had a grant on the app and was later unassigned out-of-band, such as through the Admin Console. (OKTA-1295352)