<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
ナビゲーションへスキップメインコンテンツへスキップ
システムステータス
お知らせ
お知らせ
検索
検索
Select Language
ナレッジベース
ナレッジ記事
サポート動画 ↗
ドキュメント
製品ドキュメント ↗
開発者用ドキュメント ↗
製品リリースノート ↗
コミュニティー
イベントとウェビナー
Okta Ideas ↗
リソース
製品ハブ
Customer Success Hub
製品リリースの最新情報
学習
Okta Learning ↗
サポートを受ける
ケースをオープン
HomeCommunityForum
0D50Z00008G7UalSAFOkta Classic EngineAdministrationAnswered2024-01-15T13:42:30.000Z2015-09-25T19:36:51.000Z2017-07-24T18:43:54.000Z

PatrickC.59989 (Customer) さんが質問をしました。

varun.kavoori1.5210444522562532E12 によって 9月 5, 2018(1:20 午前) に編集されました
Okta adminstration with the Application Admin role
Hello.

 

Has anyone tried to set up an Okta adminstration with the Application Admin role, and selected a specific app? It seems I cannot select a custom SAML application I have.
  • 3 件の回答
  • 再生回数 1.4K 回

  • eknittel1.3421138906768457E12 (Okta, Inc.)

    I suspect you created this application using the SAML Template app?  If you are using the SAML template application, then you need to assign the template to the admin.  This is not ideal as it allows them to administer all SAML template apps.  I recommend using the Application Wizard (Green Button) for your SAML applications.  You can then reference them by name for application administrators.

     

    Eric Knittel, Regional Director, Professional Services, Okta
    投稿を展開

  • Phil L Ibarrola (Thoughtworks)

    Hi Patrick,

     

    I have found granting admin privileges for apps created with SAML templates requires you to grant admin privileges to ALL applications created with that template.

     

    So in your scenario, you would grant admin privileges to the Template SAML 2.0 App.  Unfortunately, this user would then be granted admin privileges to any apps in your org which was created with that template.

     

    What we have done to get around this is to create all our apps using the "Create a New App" option when adding them to Okta.  This allows you to have better control over admin privileges.  The only down side was passing group attributes from Okta to custom created apps wasn't possible (we use groups to enforce authorization within the application).  However, I believe this limitation is gone (or will be soon).

     

    Thanks,

    Phil

    投稿を展開

  • PatrickC.59989 (Customer)

    Thx Eric and Phil. I tried the Application Wizard or the "Create a New App" option as you suggested, and it does give me similar SAML 2.0 integration forms seen with in the Template SAML 2.0 App, which should help solve my issue.
この質問は閉じられました。
読み込み中
Okta adminstration with the Application Admin role