Create resource campaigns to certify apps with AI agents
As an Access Certification admin, you can create resource campaigns to review and certify which users should keep their access to apps with AI agents.
About this task
You must be an access certifications or super admin to do this task.
Before you begin
- Read Best practices for creating campaigns.
- Configure Customizable reviewer context if you haven't already.
- Optional. If you know that some reviewers will be unavailable or out of office for the campaign, Assign delegate from the Admin Console.
- Optional. If you want to send campaign notifications to reviewers using Slack, check that Slack is integrated with your org and that notifications are on. Otherwise, Integrate Slack and Configure settings for Slack.
- Read Understand remediation.
- In the Admin Console, go to .
- Click Create campaign.
- Select Resource campaign.
-
Follow the prompts in the wizard to configure General,
Identities, Resources, Reviewer,
and Remediation settings. However, keep the following considerations in
mind:
- When you select AI agent as the resource type and Resource Owner as the reviewer type, Okta assigns the review to the app owner of the user sign-on app that's linked to an AI agent. However, if that user is deactivated or the app owner isn't defined, the review is assigned to the AI agent owner. This is applicable if an app has only one AI agent linked to it.
-
If you select Resource Owner as the reviewer type and the AI agent owner attributes aren't defined or the owner is deactivated for an AI agent, then the review is assigned to the fallback reviewer.
- Click Schedule Campaign.
If one of the AI agents included in the campaign doesn't have an active resource connection, the campaign won't launch on the scheduled date.
When the campaign launches, reviewers receive notifications for the reviews assigned to them based on your campaign configurations. To understand reviewer experience and the steps that they take to certify access, see Review campaigns.