Okta Identity Governance (OIG) has rolled out a new feature called Pre-configured Campaigns, which helps you to kickstart your journey into Access Certifications by providing suggested campaigns based on the data present within Okta. It can be accessed from the Okta Admin Console and is present within Access Certification sub-section of Identity Governance section.
Pre-configured campaigns can be of different types, and these are already configured and ready to be executed. It provides an easy way to get started with Access Certifications without worrying about where to start and how to configure.
As of now, Okta Access Certifications offers two different pre-configured campaigns mentioned as below:
-
Inactive Users Campaign
-
Okta Administrator Review Campaign
Inactive Users Campaign
This campaign provides the benefit of reviewing the access of users who have been inactive in the top applications in an organization for more than 90 days. Okta Access Certifications utilises the data present within Okta for SSO into different applications and analyses it to formulate the inactive users.
How To
In just two clicks, an inactive user campaign can be scheduled from the Preconfigured Campaigns tab under Access Certifications in the Okta Admin Console.
-
Log in to the Okta Admin Console.
-
Navigate to the Identity Governance section, then select Access Certifications.
-
Within the Access Certification section, there is a pre-configured campaigns tab - click on it.
-
Click Create campaign under the Discover inactive users campaign.
-
It will present the summary page of the campaign, with details like all the applications which have been included for this campaign, Schedule, Reviewer, Notifications and Remediation.
-
Click on Schedule Campaign to schedule the campaign.
-
Once the campaign has been scheduled, it will automatically start on the given date and time, or users can choose to launch at will using the Launch option within the Actions drop-down button.
Notes
Okta Access Certifications do offer the ability to edit the pre-configured campaign if you want to adjust any of its default settings.
Below are some of the default configurations for Inactive Users Campaign, which can be adjusted based on the requirements.
-
This campaign is configured as a one-time campaign and will not execute on recurring mode.
-
This campaign is configured to only review access at the application level and does not include entitlement.
-
This campaign is configured to have the administrator, who is scheduling this campaign, as the reviewer.
-
This campaign is configured to have the remediation as "Don’t take any action" for all three certification scenarios, but it can be changed based on requirements.
Okta Administrator Review Campaign
Okta Access Certification also provides a pre-configured campaign to review all the users with admin access. It helps to review and recertify the access to Okta Admin Console for users within Okta.
How To
-
Log in to the Okta Admin Console.
-
Navigate to the Identity Governance section, then select Access Certifications.
-
Within the Access Certification section, there is a pre-configured campaigns tab - click on it.
-
Click Create campaign under the Okta Administrator Review Campaign.
-
It will present the summary page of the campaign, with details like all the applications which have been included for this campaign, Schedule, Reviewer, Notifications and Remediation.
-
Once the campaign has been scheduled, it will automatically start on the given date and time, or users can choose to launch at will using the Launch option within the Actions drop down button.
Notes
Okta Access Certifications do offer the ability to edit the pre-configured campaign if you want to adjust any of its default settings.
Okta Administrator Review Campaign consists of all the default settings mentioned above under Inactive Users Campaign as well as the ones mentioned below:
-
The campaign has been configured with Self-review and Bulk Decisions in disabled state, to enhance the integrity of this campaign.
