<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y00006IjEzhSAFOkta Classic EngineAdministrationAnswered2024-04-15T11:39:20.000Z2019-05-28T20:42:51.000Z2019-05-30T16:29:45.000Z

7yybm (7yybm) asked a question.

User confusion over SWA app versus SAML app.

Our users are adding a SWA version of an application via self service instead of asking to be added to the list of assigned users for the SAML version of the application. This causes them to get a free license with the app provider and then conflicts later with their paid subscription. Is it possible to stop users from adding a single self service SWA application? Sounds like I may be asking for a blacklist of apps or something similar.


  • If you go under the Applications Menu to Self Service, you can change the settings to allow users to add only Organization managed Apps. Below the User App Request Settings you will find a list of available apps that the users can request.

    If you go in that list to the application that you do not want the users to have you can go to the SelfService settings for this application and switch change it to Allow users to request app - No.

    If this is done the users will not see that applications in the self service app request menu.

    Expand Post
    Selected as Best
  • If you go under the Applications Menu to Self Service, you can change the settings to allow users to add only Organization managed Apps. Below the User App Request Settings you will find a list of available apps that the users can request.

    If you go in that list to the application that you do not want the users to have you can go to the SelfService settings for this application and switch change it to Allow users to request app - No.

    If this is done the users will not see that applications in the self service app request menu.

    Expand Post
    Selected as Best
  • 7yybm (7yybm)

    I think I understand your comment. However it looks like this is all or nothing. If I turn on "Allow users to add org-managed apps" and shut off "Allow users to add personal apps" then I need to manage the ENTIRE application list that is available. This is a lot of work. That was why I was hoping for a blacklist or something to that effect.

  • JatinB.72487 (Customer)

    Blacklisting seems like a tactical solution, since Okta usually updates templates in which case the new template may not by blacklisted and you would be back to squire one. I agree with the option provided by Alexandru. This will also give your Access Management team control over overall usage of the Okta instance.

  • 7yybm (7yybm)

    Any other suggestions for this before I move on?

Loading
User confusion over SWA app versus SAML app.