Triggering Okta Access Certification Campaigns On-Demand to Make Certification Campaigns More Continuous in Nature
Last Updated:
Identity Governance
Okta Classic Engine
Okta Identity Engine
Overview
This article addresses whether it is possible to trigger a campaign on-demand (for example, when a user moves to a different role) to make certification campaigns more continuous in nature.
Applies To
- Okta Classic Engine
- Okta Identity Engine (OIE)
- Access Certifications
- Okta Workflows
- Okta Identity Governance (OIG)
- Okta Identity Governance API
Solution
Yes, this is supported by combining Okta Workflows with the Okta Identity Governance APIs. Okta Workflows can be configured to listen for specific events, such as when a user changes roles, gets promoted, or moves departments, and then create and launch an Access Certification campaign via Okta Identity Governance APIs. Each company classifies a "Mover" flow in their JML process differently, and Okta Workflows gives the ability to configure which triggers to look for.
