Overview
This article teaches how to create a report in Okta Workflows. For a given application, the report lists all associated groups and the owner of each group, if one has been assigned.
Solution
The report uses two flows:
- A flow to list all app groups
- A helper flow to list the owner for each group
A flow to list all app groups
The List app groups flow lists the group assigned to an app:
List application groups flow.
How the flow works
- The Helper Flow card has an input to enter an app name. This is the app for which you need to list groups and owners.
- The group information and owners are saved in a table. The flow clears the table before each run with the Tables-Clear Table card.
- The Okta Search Applications card provides additional information about the application.
- The Text-Compose card creates an API endpoint URL for the next card.
- The Okta-Custom API Action card invokes the
/api/v1/apps/ID/groupsendpoint.- The call includes the
expand=groupparameter. This parameter adds a group name for each group in the list. - The
parameter _embedded.group.profile.nameholds the group name. - The flow utilizes the Custom API Action cards, as the Okta-Search Groups card does not include group name information.
- The call includes the
- The flow passes the group list to the List-For Each card to process each group and list the group owner.
A helper flow to list the owner for each group
List group owner helper flow:
List group owner helper flow.
How the flow works
- The main flow passes three fields to the helper flow:
- Group ID
- Group name
- App name
- The Text-Compose card creates an API endpoint to list the group owner.
- The Okta-Custom API Action card invokes the
/api/v1/apps/ID/groupsendpoint to list the group owner. - The Object-Get card retrieves the group name.
- The Tables-Create Row saves information. It creates a table row with App name, Group name, and Group owner (if set).
The table looks like this:
Table showing groups assigned to an app and group owners.
Related References
