After getting Okta Identity Governance (OIG) enabled, the approval is not working as expected within an Access Request. The approval action is not working when the Requestor's Manager is assigned. The users seem to have the managers properly configured, but the approval remains unassigned.
Steps to Reproduce
- Create a new Request Type.
- Add an approval task.
- Select Requester's manager on the Assigned to field.
- Test the request with a user that has a manager on their profile.
The approval task remains unassigned or is assigned to an incorrect reviewer.
NOTE: This solution applies just to Access Requests. For Access Certification, the mapping cannot be altered; however, when a Campaign is configured for the reviewer, instead of using the Manager selection for the reviewer, use Okta Expression Language to point towards the attribute that contains the manager's Okta username or email.
- Okta Identity Governance (OIG)
- Access Requests
By default, the managerValue attribute in the Access Requests app maps to the user.managerID value. If the user.managerID value is not set as the Okta username or email address of the user's manager in the user's profile, the Access request cannot be properly automatically assigned to the requester's manager.
Map the desired Okta manager attribute from the user's Okta directory profile to the Okta Access Requests application in the Okta Admin console:
- In the Okta Admin console, navigate to Directory > Profile Editor > Apps > Okta Access Requests User and select Mappings, then go to the Okta User to Okta Access Requests tab.
- Select the attribute that defines the manager to be assigned to access requests and map it to the managerValue. For example, a custom attribute called
user.managerEmailcould be used:
After applying the new attribute mapping, future access requests should now be directed to the user's manager.
NOTE: The user manager's account must be in an active status; otherwise, the approval task will remain unassigned. Review 'About user account status' for further information.
