Access Requests

Directly integrated into an Okta organization, Access Requests automates the process of requesting access to applications, groups, and entitlement bundles. Access Requests delivers a simplified and frictionless approach that automatically routes user requests to one or more approvers for action.

This allows Access Requests to eliminate the challenges common in more traditional request management processes:

• Poor request experience
• Risk of human error
• Decreased IT productivity
• Complex and rigid processes
• Audit and compliance deficiencies

As a super admin, after you enable the Access request conditions and Resource catalog feature, you can use conditions and request types to streamline requests. Access requests admins who also have the app admin role assignment can create and manage conditions as well.

• Conditions

  Early Access release. See Enable self-service features.

  Conditions are rules that define who can request access, the level of access that they can request, the duration of access, and the approval sequence for each app directly from the app's profile page in your Admin Console. An approval sequence is a linear series of steps like questions, Okta Workflows, approvals, and tasks. These steps govern the information that specific users must provide, the users responsible for approving or denying the request, and any actions that must be completed.

  If you're new to Access Requests, use conditions to manage access requests first.

• Request types

  Request types are structured flows that define the lifecycle of a request. These flows are made of steps like questions, tasks, and timers. You can associate a request type with a resource (apps, groups, entitlement bundles) using a configuration list. Each Access Requests team owns and manages multiple request types and associated requests. You can also set up some automated actions in Okta and in integrated external systems like Jira and ServiceNow.

  With request types, the requesters go to the Okta Access Requests web app from their End-User Dashboard, select a request type, and then enter the required information to request access. Requesters can also request access from Slack or Microsoft Teams (if integrated with Access Requests).

  You can't create request types to manage access requests for Okta admin role bundles.

Benefits

• Self-service automation

  Build no-code processes to define users who can request access to which resources, users who are responsible for approving the request, and the duration of access to the resource. This allows users to request access to resources in a self-service manner.

• Multi-step request routing

  Using request types or approval sequences, you can automatically delegate manual tasks like providing context or approving a request to requesters, approvers, task assignees. You can also trigger a delegated flow to run from an approval sequence or a request type.

  You can assign one or more approval tasks to specific users to ensure that critical requests receive the necessary oversight and are thoroughly reviewed. You can also capture and eventually report justifications for request approvals or denials.

• Omnichannel support

  Users can interact or approve access requests from the Okta Access Requests web app Slack or Microsoft Teams, depending on the method you use to streamline requests.

If you've enabled access request conditions, there are a few more benefits:

• Scalability and ease of configuration

  Reuse your existing Okta groups associated with an app in a condition to control its scope. You can reference more than one group in a condition. If you've configured entitlements and entitlement bundles for an app, you can use them to define the scope.

  Access request conditions also allow you to reuse an approval sequence in conditions for different apps. This means that you don't need to recreate the request routing flow for each app as you do with request types.

• Integration with the End-User Dashboard for requesters

  Requesters don't need to go to the Okta Access Requests web app in their End-User Dashboard and decide which request type to choose to get the access they need. They can go to the resource catalog of their End-User Dashboard, select the app's tile, and enter the required information to request access.

  Requesting access to apps using Slack or Microsoft Teams isn't supported for apps managed by conditions.