<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00009hzQfmCAEOkta Identity EngineWorkflowsAnswered2024-10-10T22:46:06.000Z2023-09-29T16:56:18.000Z2023-09-29T22:05:10.000Z

LosJ.77330 (Customer) asked a question.

Workflow to check if user belongs to app if so then deactivate when deactivated in Okta

Hello

 

I am working on a workflow to deactivate a user in a certain app when they are deactivated in Okta. But id like to have it check if they are assigned to the app first then only continue with deactivating if that piece is true. SCIM isnt an option and thus workflow is the next best thing for me to get this issue resolved somewhat quickly. I have a workflow now that just deactivates the user in the app when someone is deactivated in Okta but id like to add some more logic to avoid so many errors when the person doesn't actually belong to that app


  • TimL.58332 (Workflows)

    @LosJ.77330 (Customer)​ - Interestingly enough I just built something along this same vein yesterday. I've attached a POC. It doesn't make any changes so you can test with it and see what I am doing here then integrate it. You will obviously need to obtain a Okta User ID for both a user that is in/not in the app to test with. And also adjust the "Get Assigned User for Application" to be the application you are targeting.

    Expand Post
    Selected as Best
  • TimL.58332 (Workflows)

    @LosJ.77330 (Customer)​ - Interestingly enough I just built something along this same vein yesterday. I've attached a POC. It doesn't make any changes so you can test with it and see what I am doing here then integrate it. You will obviously need to obtain a Okta User ID for both a user that is in/not in the app to test with. And also adjust the "Get Assigned User for Application" to be the application you are targeting.

    Expand Post
    Selected as Best
  • MatthewH.10249 (State of Iowa)

    Consider using the Workflow Trigger card "Okta - User Unassigned from Application". It will provide you the user's ID so if you need to know if the account is deactivated in Okta you can then pass the ID to the action card "Okta - Read User" to check before finally calling the external API to disable the user object in the connected app.

This question is closed.
Loading
Workflow to check if user belongs to app if so then deactivate when deactivated in Okta