Configure profile enrollment policies

A profile enrollment policy collects attributes from an end user when they attempt to access an app. You can use the policy for Self-Service Registration or for progressive enrollment.

In Self-Service Registration scenarios, end users click a Sign-up link in the Sign-In Widget, and when they authenticate into the app, Okta adds their profile and provisions them to the appropriate groups. The default profile enrollment policy has Sign-up enabled and it controls Self-Service Registration for your entire org.

In progressive enrollment scenarios, the enrollment policy can collect more data requested by an application. This collection happens through the profile enrollment form shown to the user when they sign in.

Progressive enrollment is useful:

  • If you want to have a user’s email address added to their profile before they access a sensitive application
  • When visitors need to create a profile before they can view or download resources