This article addresses whether it is possible to trigger a campaign on-demand (for example, when a user moves to a different role) to make certification campaigns more continuous in nature.

• Okta Classic Engine
• Okta Identity Engine (OIE)
• Access Certifications
• Okta Workflows
• Okta Identity Governance (OIG)
• Okta Identity Governance API

Yes, this is supported by combining Okta Workflows with the Okta Identity Governance APIs. Okta Workflows can be configured to listen for specific events, such as when a user changes roles, gets promoted, or moves departments, and then create and launch an Access Certification campaign via Okta Identity Governance APIs. Each company classifies a "Mover" flow in their JML process differently, and Okta Workflows gives the ability to configure which triggers to look for.

Related References

• Okta Identity Governance API
• How to create an Access Certification via an Okta Workflow (User Profile Update Example)
• How to create an Access Certification via an Okta Workflow - Group Event Trigger