HERE supported features

The following features and functionality are available with a HERE integration.

Feature Description
Push new users
  • Users created in Okta are created in HERE as a standard account.
  • The User role is assigned by default when you create a user without assigning another role.
  • You can send multiple invitations to the same username and email address.
  • Role assignments pushed from Okta can include roles beyond what the HERE UI presents. The full set of roles is managed at the Okta app instance.
  • If an invited user accepts their invitation, their status changes from Invited to Member only after you re-import them. Re-import users any time you want to update or modify their profile details.
Push profile updates
  • You can update the First Name and Last Name fields for invited users only. To do this, resend the invitation to the same email address.
  • You can't update the Username, Email, First Name, or Last Name fields for realm members. The only updatable parameter for realm members is their role.
  • Role assignments pushed from Okta can include roles beyond what the HERE UI presents. The full set of roles is managed at the Okta app instance.
  • If an invited user accepts their invitation, their status changes from Invited to Member only after you re-import them. Re-import users any time you want to update or modify their profile details.
Push user deactivation Deactivating a user or removing their access to the app in Okta disables the user account in HERE and invalidates all access tokens that are associated with that user.
Reactivate users Reactivating or enabling a user in Okta reactivates or enables the account in HERE.
Import new users
  • Accounts from HERE are imported into Okta.
  • Assignments are only tracked for users who have accepted their invitation and joined HERE. When users are imported, assignments associated with pending invites are automatically cleared.
  • If an invited user accepts their invitation, their status changes from Invited to Member only after you re-import them. Re-import users any time you want to update or modify their profile details.
Push password updates
  • A password is set once, when the user receives an invitation and sets up a password to sign in.
  • You can't update a user's password in Okta after they accept their invitation and become a realm member.
  • Passwords must be at least eight characters and include at least one digit, one uppercase letter, one lowercase letter, and one special character.
Import user schema The user schema in HERE is imported into Okta. Only mandatory fields are available.
Push groups
  • You can push groups and their members to integrated apps. See Manage Group Push.
  • A user must be an accepted Member to be added to groups. You can't add a user who is still listed as Invited.
  • If a user has accepted their invitation, re-import the users to update their status before you assign them to a group.
  • You can update the Display Name and Description of a group.
  • You can only manage group roles from HERE, not from Okta.
  • A group created from Okta has Full Access as the default access level.
  • Only members with Group access as their access level can be added to groups.
Entitlement Management
  • You can manage app entitlements for HERE in Okta.
  • If the app supports Okta Identity Governance, then you need to enable it to manage entitlements.
  • The HERE UI offers a limited set of assignable roles. Additional roles are available and can be managed directly through Okta.