Automate mapping of okta-groups to aws-roles Skip to main content
https://support.okta.com/help/answers?id=9062a000000bmjbqay&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Jatin VaidyaJatin Vaidya 

Automate mapping of okta-groups to aws-roles

Hello,

Currently, when I assign the "Amazon Web Services" OAN app to a user, I need to manually select the aws-roles for the user. Is it possible to automate this selection of aws-roles, driven by okta-group memberships for a user?

Thanks,
Jatin
Best Answer chosen by Jatin Vaidya
Gabriel SrokaGabriel Sroka (Okta, Inc.)
2 possible solutions:
1. assign okta-grp-1 and 2 to AWS with role-X, repeat for 3/4 and Y, or
2. create a new group called grp-X. create a Rule: if member of grp-1 OR grp-2 then assign to grp-X. map grp-X to AWS with role-X. repeat for 3/4 and Y

All Answers

Gabriel SrokaGabriel Sroka (Okta, Inc.)
Hi Jatin
You can assign an Okta group to the app and then add the user to the group. You might be able to use a Group Membership Rule for this, see:
https://support.okta.com/help/articles/Knowledge_Article/Using-Group-Membership-Rules
Jatin VaidyaJatin Vaidya
Thanks Gabriel, but that doesn't meet the requirement. The requirement in my question is not only to automate assignment of the aws app to a user, but also to automate assignment of aws-roles to the user based on their okta-group membership.
For ex.
if user is member of okta-grp-1 OR okta-grp-2 then assign AWS app with aws-role-X 
if user is member of okta-grp-3 OR okta-grp-4 then assign AWS app with aws-role-Y

Regards,
Jatin 
Gabriel SrokaGabriel Sroka (Okta, Inc.)
2 possible solutions:
1. assign okta-grp-1 and 2 to AWS with role-X, repeat for 3/4 and Y, or
2. create a new group called grp-X. create a Rule: if member of grp-1 OR grp-2 then assign to grp-X. map grp-X to AWS with role-X. repeat for 3/4 and Y
This was selected as the best answer