Okta Identity Governance release notes

Generally Available features

Additive entitlements

Admins can now assign individual entitlements to users using an API. They can remove these entitlements by API or through the Admin Console.

Increase to the maximum access duration limit

When you create or edit access request conditions, you can now set the Access duration field to a maximum of 365 days or 52 weeks.

Warning notification when access ends

Requesters now receive a notification one day and and one hour before their access ends. Okta sends these notifications only for the access that was requested using requests managed by conditions. See Access request notifications.

Improvements access request experience for Slack

If you've enabled the Unified Requester Experience feature, you can now configure whether users can submit and approve requests in Slack without being redirected to the End-user Dashboard. This applies to access requests that are managed by request types and to conditions. Additionally, when Approve and deny requests is toggled on, users can approve Okta admin role bundle access requests from Slack. See Enable Slack notifications.

Slack integration for Access Certifications and Access_Requests is Generally Available in Production environments

The Identity Governance - Slack notifications feature allows you to send Access Certification campaign notifications to reviewers and admins using Slack. You can send notifications for new campaigns, reminders for campaigns closing soon, reassigned review items, and more. Slack notifications for campaigns help reduce the need for additional manual follow ups for campaign owners. They also help increase the completion rate of reviews before the campaign's end date.

Once enabled, super admins and admins with the Manage governance settings permission can integrate Slack with Okta from the Settings > Integrations tab and configure Access Certifications and Access Requests notifications. See Integrations.

Restrict delegates is Generally Available in Production environments

Restrict who users can select as a delegate to ensure that tasks are assigned only to authorized individuals. Configure settings to limit delegate selection to a user's direct manager, their colleagues (peers with the same manager), or allow them to select anyone in the org. This helps you strengthen org security, improves compliance, and gives you more control over task delegation. See Enable end users to assign delegates.

Slack integration for Identity Governance is Generally Available in Production environments

Okta for Government Moderate and Government High customers who use commercial Slack instances can now integrate Slack with their org to streamline access management in Access Requests and Access Certifications. Users can now submit and approve requests in Slack as well as receive Slack notifications for access requests and certification campaigns. Feature availability varies depending on whether the Unified requester experience feature is enabled. See Okta Identity Governance Limitations for Public Sector Service and Integrate Slack.

Early Access features

Certify resource collections - User campaigns

Run access certification user campaigns to certify user access to resource collections. Running user campaigns that include collections helps you reduce the volume of review items for reviewers and accelerate campaign completion. Using the Contextual Information settings, you can also provide reviewers with the necessary context to help them make informed and more accurate decisions. See Create user campaigns.

This is an Early Access release. See Enable self-service features.

Assignment methods for access certification campaigns

The Assignment methods setting gives access certification campaign reviewers context on how a user was assigned access to a resource. It provides visibility into assignment methods for all resources, including all methods used to grant entitlements. This feature helps reviewers to make informed, accurate decisions about a user's access. See Customizable reviewer context.

When you enable this feature, the following UI changes are applicable:

• The existing Assignment type field has been renamed to Assignment methods.

• The existing Application assignment type field has been renamed to Application assignment methods.

• Resource-specific assignment method fields, such as Assigned via policy, Collection assignment type, Entitlement assignment type, and Group assignment type are no longer available. The information is displayed in the Assignment methods field.

The assignment method value Custom has been renamed to Individual. See Assignment methods.

This is an Early Access release. See Enable self-service features.

Smart Review for campaign reviewers

Smart Review creates a step-by-step workflow for campaign reviewers that groups items by user or resource. This approach helps reduce reviewer fatigue, enables more informed access decisions, and helps reviewers efficiently tackle high-volume campaigns. See Smart review.

This is an Early Access release. See Enable self-service features.

Fixes

• Reviewers were redirected to the End-User Dashboard instead of the Okta Access Certification reviews or Okta Security Access Reviews app when they clicked View Assigned Reviews from a notification or accessed the review using a link. (OKTA-1100001)