Create a request type

This page explains the general process of creating a request type for Okta Access Requests. For a more specific example, see Configure a request type associated with bundles or Create a sample Request Type.

Before you begin

• Create an Access Requests team or ensure that you're a part of the team you want to create a request type for.
• Push Okta groups to Access Requests
• To use a requester's manager as approver, ensure that the managerId user attribute in Okta is set as the Okta username or email address of the user's manager. Otherwise, the request's assignee has to manually specify an approver for the request.
• To use the group owner as an approver in requests, consider the following:
  • If the owner of a group in Okta is another Okta group, this group must be pushed to Access Requests for it to be used as an approver.
  • If you want to assign group owners as approvers for a request type, ensure that you have group owners configured in Okta. See Group ownership.
  • If there are multiple group owners, only one group owner needs to review and take action on the request. So if a group member approves or revokes access for a request, the request is marked as completed for all owners.
  • If the number of group owners within a group is greater than 10, then requests are randomly assigned to 10 group owners.

• To use the Run a workflow action, ensure that you have the following setup:

  1. Enable the Okta Workflows actions in Access Requests feature for your org.

     Early Access release. See Enable self-service features.

  2. Set up delegated workflows. See Delegated flows and Build a delegated flow. Make sure that the delegated flows you need are active in the Workflows Console.

  3. Create a custom admin role with the following configuration:

     1. The role has the Run delegated flow permission.

     2. The resource set contains at least one delegated flow that needs to be executed.

     3. This role and the resource set are assigned to the Okta Access Requests OAuth application.

  See Create an admin assignment using a role.

  4. Sync the Workflows resource manually to immediately use the delegated flow you created. See Manually sync resources from Okta.

  5. Give teams access to the Workflows resource.

     1. Go to Access Requests console Settings Resources Workflows.

     2. Click Manage Access.

     3. Enable the toggle for the team on the Full access to all Workflows dialog.

  6. Check that the teams that you need and the Run a workflow toggle are enabled.

     1. In the Access Requests console, go to Settings Integrations.

     2. Click Edit connection on the Okta tile.

     3. Check that the teams you need are listed. If not, open the Select teams dropdown menu and select the teams.

     4. Enable the Run a workflow toggle if it's disabled.

Start this task

1. Open the Access Requests console.

2. On the left panel, click Access Requests.

3. Click Create Request Type.

4. From the editor window, configure the general settings. See General settings.

5. Click Question to add questions to collect information from users. A requester can't modify answers to the questions after they submit the request.

6. Configure the question settings. See Question settings.

7. Optional. Click Question to add more questions. Drag the questions to change the order in which they appear to the requester.

8. Click Task on the central panel to add tasks to prompt actions from a user.

9. Configure the task settings. See Task settings. You can also add a task that automatically runs an Okta workflow.

10. Optional. Click Task to add more tasks.

11. Optional. Click Timer on the central panel to add a timer to control the flow and timing of follow-up actions.

    Timers can last for up to 90 days. If a duration or date is specified outside the limit, the timer still ends after 90 days. After the timer expires, the request begins any follow-up actions. The timer ignores any changes to the request that would change the end date of the timer.

12. Configure the timer settings. See Timer settings.

13. Optional. Configure conditional logic for tasks or questions.

    1. Select a task or question on the central panel.

    2. On the right panel, open the Logic tab.

    3. From the dropdown menu, select Only show this field if or Only show this task if

    4. From the Field or task dropdown menu, select a task or question that should be a prerequisite.

    5. Specify a logical operator and content to match against. The available operators vary depending on the input type that you've selected for your question or task, and the task type. See Operators.

    6. Optional. Add more conditions.

    7. After you add a second condition, select All or Any from the dropdown menu to determine whether requesters need to meet all or any of the conditions for the field or task to be available to them.

14. Click Publish to make the request type available to the specified audience.

To understand the experience for requesters and approvers, see Create requests and Manage tasks.

Related topics

Request type settings

Configure a request type associated with bundles

Create requests