Overview

Applies To

• Access Certifications

Solution

1. Log into Okta as an Administrator with the Access Certification role or Super Admin.
2. Select Identity Governance menu.
3. Select Access Certification application.
4. Locate and click the blue + Create campaign button.
5. Select Resource Campaign.
6. Fill out each step to create a campaign.

Create campaign screen

Step 1: General

1. Enter the name of the campaign.
2. Enter an optional description.
   1. The description is visible to the reviewer and can be used as part of a verification rule.
3. Select the Start date / Start time and time zone.
4. Select the Duration of time the campaign will run.  NOTE:  A duration of at least 8 days is required as a minimum to support multiple levels of reviewers.
5. Select Make this recurring and set up those related options as needed if desired.
6. Click the Next button.

Step 2: Resources

Option : Applications

1. Select Applications from the dropdown.
2. Enable Review entitlements toggle button.
3. Use the Select application box to pick Okta Admin Console as an application.
4. Use the Select Scope box to pick an option of All entitlements and Bundles or select Specific entitlements and bundles to limit the campaign scope.

5. Click Next.

Step 3: Users

Select the user's scope for this campaign.  Your options are:

• Option 1: All users assigned to the selected resources
• Option 2: Specify users in scope

1. Select Specify user scope.
2. Use the Scope Users box to type in an Okta Expression to identify users based upon Okta Expression Language.  Feel free to click Sample expressions or the Okta Expression Language guide as reference.
3. Click Next.

Step 4: Reviewer

The Multi level reviewer offers some of the same types of possible reviewers but now includes more than the single layer reviews.

NOTE:  If you are reviewing Applications, the Group Owner will be grayed out as that is not a supported review type. Also the same person cannot be both levels of reviewers.  

1. Select the First-level reviewer by clicking the appropriate box on the screen.  

NOTE: Options applicable to the reviewer that was selected will be displayed.  Clicking the Pencil icon to the right of the reviewer type will bring you back to the previous selection screen.  

2. Select Preview Reviewer and verify your settings.

For Multi level Reviewer setup:

1. Click + Add level.
2. Follow the same steps for the Single Level reviewer above, except the Reviewer type, which cannot be reused if selected in the first level review.  
3. Select Preview 2nd level Reviewer and verify your settings.

When multi level reviews are configured, Additional Settings are available to configure.  

4. Select the option for which decision go to the second level.

These settings allow you to define which decisions may or may not be reviewed by the second level reviewer and when the second level review should start.  

Second level reviewers will have visibility into only items moving onto the second level. When that second level reviewer should see all items, it is recommended to pass on both approved and revoked decisions.

NOTE: Reviews less than 8 days will not support a 2nd level review flow. Items not completed by the first level reviewer before the second level review begins will be marked as overdue, and it’s recommended to enable the overdue notifications so that these reviewers know and complete their reviews quickly.

5. Expand the Notification settings section.

6. Choose the notifications you want to be sent as part of this campaign.
   1. If you decide to go back to a Single level review for the campaign, simply click the Remove Level button on the screen.
7. Click the Next button.

Step 5: Remediation

1. Select the appropriate remediation steps by selecting the appropriate radio button.

2. Click the Schedule Campaign button to finish creating the campaign.
3. From there you can wait until the time scheduled to start or as an Admin you can Launch, Edit or Delete a scheduled campaign.

Related References

• Access Certification documentation
• Multi-level reviewers