| Push new users |
- Users created in Okta are created in Appspace without licenses.
- The Email, Username, and Network
ID fields are required. Email and username must match and be unique across all
users.
- To add a mobile phone number, include the country code with the phone number in the format
+x xxxxxxxxxx. If the country code is missing or the phone number is
invalid, user provisioning fails.
- When users are created, their first name is automatically set to their full email address
and their last name is set to the email domain.
- User licenses aren't assigned through this integration. Appspace doesn't expose an API to
fetch license IDs. You must manually assign user licenses in the Appspace UI.
- When users are created, their first name is automatically set to their full email address
and their last name is set to the email domain.
|
| Push profile updates |
- Updates to the Okta user profile are pushed to Appspace.
- You can update the First Name, Last Name,
Mobile Phone Number, and Role fields. You
can't update the Email or Username fields.
|
| Push user deactivation |
Users deactivated in Okta are suspended in Appspace. |
| Import new users |
Users in Appspace who aren't in a suspended state are imported into Okta. |
| Reactivate users |
Users reactivated in Okta are reactivated in Appspace. |
| Entitlement Management |
- You can manage app entitlements for Appspace in Okta.
- If the app supports Okta Identity Governance, then you need to enable it to manage
entitlements.
- User role assignment is optional. The following roles are supported:
AccountOwner, NetworkAdmin,
Publisher, and Author. The Viewer role
behaves the same as no role assigned and isn't exposed in the integration.
|
| Push Groups |
- You can push groups and their members to integrated apps. See Manage Group Push.
- You can update group display names and members.
- Creating a new group through this integration uses an internal Appspace endpoint that isn't part of the official Appspace API documentation. This endpoint may be subject to change.
- You can only manage group roles from the Appspace Admin Console, not from Okta.
- A Network ID is required when creating new groups.
|