SteveF.61090 (Customer) asked a question.
Automate the running of Manage Okta Group Membership Based on Profile Attribute
I'm testing out workflows and I can't see how I can automate the running of the workflow "Manage Okta Group Membership Based on Profile Attribute". In my case, the profile attribute I'm using is title.
What I'm trying to accomplish is three things:
- Initial run to check for group assignments and assign to groups based on profile attribute
- Add user to group assignments upon account creation in Okta
- Change group assignments based on change to profile attribute
How do I automate the running of workflows?
@SteveF.61090 (Customer) -- Templates are designed as a framework to help solve a specific use case. They are very rarely going to fit your needs 100% and would require an understanding of Workflows to be able adjust to fit your specific needs.
As you stated there are 3 different things you are trying to accomplish and would essentially require 3 different sets of logic and a minimum of 4 different flows.
1) This flow would be something "manually ran" once & would be designed for your initial setup. You could obtain all users using (List users with search) to obtain their attribute value. You would then STREAM them to the Helper flow. If you have more than one value for the attribute that determines which group they would go to you would also need to make a "Lookup" either using a lookup table or a workflows table. Then based on the attribute value design your action.
2) This flow would start with an Okta Event card "User Created" and would invoke/execute when a user is created in Okta. The Okta Event cards leverage the Okta Hooks to send event-hook-eligible System Log events to a destination (Workflows in this instance).
3) This would be a flow that starts with an Okta Event card "User Okta Profile Updated". You would then pass the "changed attributes" into a "Continue If" card that is set to: A: the attribute you are monitoring (IN) B: "changed attributes". This way every time the profile of a user is updated this payload will be sent to the Workflow. But it will only continue to take action if the attribute you are monitoring is the one that is updated. If you have more than 1 you are monitoring you can use additional logic but this is more advanced.