NateS.64629 (Customer) asked a question.
In the case of a brand new user, I am looking for ways to either limit the apps the user can see, or route them to another org with limited applications including an Onboarding or Training app that they must complete to gain access to the rest of the applications.
I have thought about using IDP routing rules with a flag to route them to another Org, but that just authenticates them and routes them right back. I have also thought about setting up the default app on login to be something else other than the dashboard, but there seems to be no good way to set this only for specific users. I have also looked into just denying them access via an app policy, but there is no good way to set a message telling them why they are denied. They would just see a bunch of access denied messages and that wouldn't be a good user experience.
In short, I am trying to figure out how to route the user somewhere other than the normal dashboard or somehow hide the apps until they finish training. Thanks for any thoughts or advice on how to go about this.
Hi @NateS.64629 (Customer) , Thank you for reaching out to the Okta Community!
Not sure what your limitations are, but the easiest way would be to handle application assignments via dedicated Group memberships (Quick note for best practice - Never ever use the "Everyone" group for any app assignments). Only add users to the needed group or groups when appropriate.
If your dealing with a large number of groups, you can simplify things by leveraging the Group Rules feature.
If your not dealing with a large number of apps, you might want to consider the Self-Service request feature gated by an approval system.
More details about this here:
https://help.okta.com/en-us/Content/Topics/Apps/apps-selfservice-configureorg.htm
https://help.okta.com/en-us/Content/Topics/Apps/apps-selfservice-configureapprovalflow.htm
https://help.okta.com/en-us/Content/Topics/Apps/apps-selfservice-approver.htm
All that being said, we'll leave this Question open for Community input for any other ideas that might be more appropriate for this use case.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Community members help others by clicking Like or Select as Best on responses. Try it today.