| Push new users |
- Okta creates users in Cloudflare when you assign the app to users.
- The
username and email attributes must have the same value for a user.
- Cloudflare assigns the Minimal Account Access role by default to users that Okta creates. You can see this role after you import the user again.
|
| Push profile updates |
- Okta pushes profile updates to Cloudflare.
- You can update only the
firstName and lastName attributes. You can't update the email or username attributes.
|
| Push user deactivation |
- When you deactivate a user in Okta or remove the user's assignment to the app, Okta deactivates the account in Cloudflare.
- When you reactivate the user or reassign the app in Okta, Okta restores the same account in Cloudflare.
|
| Import new users |
- Okta imports only active users from Cloudflare.
- Cloudflare doesn't return users in any other state, so Okta doesn't import them.
|
| Entitlement Management |
- You can assign multiple groups to a user.
- Entitlements are managed through groups. When you assign groups to a user, all policies attached to those groups apply to the user.
|
| Push groups |
|