Configure the super admin role

Before you begin

• Ensure that ISPM is integrated with Okta for your org. If not, follow the steps in Okta integration.
• You must be a super admin or an app admin in Okta to integrate Okta with ISPM.

Create a group in Okta

1. In the Okta Admin Console, go to Directory > Groups.
2. Click Add Group.
3. Enter a name in the Name field. Include ISPM in the group's name. For example, app-ispm-super-admins.
4. Optional. Enter a description for the group in the Description field.
5. Click Save.

6. If you're the Okta super admin who's configuring roles in ISPM, add yourself to this Okta group.

Assign the group to the Okta ISPM - SSO OIDC app

1. In the Okta Admin Console, go to Applications > Applications.
2. In the Search field, enter Okta ISPM - SSO OIDC.
3. Click the app name and select the Assignments tab.
4. Click Assign, and then select Assign to Groups.
5. Locate the group that you created and click Assign.
6. Complete the fields in the Assign Okta ISPM - SSO OIDC to Groups dialog if it appears.
7. Click Save and go back.
8. Click Done.

Map the role to the group

If you're configuring roles for the first time in ISPM, complete the following steps:

1. In the ISPM console, go to Settings > Roles assignment. If you were signed in to ISPM before you created the group in Okta, sign out of ISPM and sign in again. The group that you created in Okta should be available.

2. Open the Roles dropdown menu associated with the group and select Super admin.

3. See Enable Role assignments.

If you want to assign the super admin role to groups that you aren't a member of, do these steps instead:

1. In the ISPM console, go to Settings > Roles assignment.

2. Click Assign group roles..

3. Enter the group name exactly how it appears in Okta. If the group name in ISPM and Okta are different, users won't be able to access the ISPM console.

4. From the Roles dropdown menu, select Super admin.

5. Click Assign roles.

Related topics

Enable Role assignments