Create identity campaigns to certify resource connections
As an Access Certification admin, you can create identity campaigns to review and certify which resource connections your AI agents should keep.
About this task
You must be an access certifications or super admin to do this task.
Before you begin
- Enable the Resource Access Certifications for AI Agents feature. Resource Access Certifications for AI Agents is an Early Access release. See Enable self-service features.
- Read Best practices for creating campaigns
- Configure Customizable reviewer context if you haven't already.
- Keep a list of AI agents that you want to include in the campaign handy.
- Optional. If you know that some reviewers will be unavailable or out of office for the campaign, Assign delegate from the Admin Console.
- Optional. If you want to send campaign notifications to reviewers using Slack, check that Slack is integrated with your org and notifications are on. Otherwise, Integrate Slack and Configure settings for Slack.
- Read Understand remediation.
- In the Admin Console, go to .
- Click Create campaign.
- Select Identity campaign.
-
Follow the prompts in the wizard to configure General,
Identities, Resources, Reviewer,
and Remediation settings. However, keep the following things in mind:
- When you select AI agent as the identity type, Okta automatically includes all resource connections associated with the AI agent in the campaign.
- When you select AI agent as the identity type and Resource owner as the reviewer type, the AI agent owner is assigned as the reviewer.
- Click Schedule Campaign.
If one of the AI agents included in the campaign doesn't have an active resource connection, the campaign won't launch on the scheduled date.
When the campaign launches, reviewers receive notifications for the reviews assigned to them based on your campaign configurations. To understand reviewer experience and steps they take to certify access, see Review campaigns.