User Management with Okta

Overview

Step 1: Create groups

Step 2: Add users

Step 3: Push groups to Blameless

Linking groups

Overview

Blameless supports SCIM integration with Okta to easily create and manage user groups directly from the Okta environment.

In addition to creating groups and adding Blameless users, this article also explains how to use the following features:

• User activation
• User deactivation
• Group pushing
• Group linking
• User to group bi-directional updating (when groups are linked)

Step 1: Create groups

1. Log on to the Okta console ⏤ https://<yourSubdomain>.okta.com/login/default ⏤ ensuring that you are authenticated as an Administrator.
2. On the left sidebar, expand Directory and then select Groups.

3. In the Groups section, select Add group.
   1. The Add group dialog box appears.

4. In the Name field, enter a name for the group.
5. In the Description (optional) field, enter a brief description of the group.
6. Click Save.

7. Select your new group. Use the search functionality if needed.

8. Select the Applications tab and then click Assign applications.
   1. A list of applications appears.

9. Click Assign for the application you wish to assign the group to.
10. In the Assign Applications to <Group Name> dialog box, complete all relevant fields. When done, click Save and Go Back.

11. Click Done. Repeat this process to create additional groups, if needed.

Step 2: Add users

1. Select the People tab.

2. Click Assign people.

3. Click on the + symbol next to each user to assign them to the selected group. Alternatively, use More actions → Assign all people in org if you need to assign everyone in the organization.
   1. Note: To learn more about user statuses, see About user account status .
4. When finished, click Done.

Step 3: Push groups to Blameless

1. In the left sidebar, navigate to Applications → Applications and then select your application (i.e., SCIM 2.0 Test App (Header Auth)).

2. Select the Push Groups tab.
3. Click the Push Groups drop-down arrow and select Find groups by name.

4. In the Search field, start entering the name of the group. A list of groups that match the text appears in real time. Select the relevant group to push to Blameless.

5. Click Save. This action will create a group in Blameless that corresponds with the Okta-created group.

6. After a few moments, the status under the Push Status column header will become Active.  The group has now been pushed to Blameless.

7. Confirm the push by navigating to Identity Management in the Blameless UI ⏤ the Groups tab is selected by default.
   1. Confirm users in group: Select the vertical ellipsis icon to the right of the group entry and then click Assign/Unassign Users to see a list of users in the group.
   2. View total number of users added: Select the Users tab.

Linking groups

If you have created groups in Blameless, they can be controlled via Okta by linking. This is done by creating the group in Okta and then linking it to the Blameless group.

1. Create the group in Okta. 
2. In the left sidebar, navigate to Applications → Applications and then select your application (i.e., SCIM 2.0 Test App (Header Auth)).

3. Select the Push Groups tab.
4. Click the Push Groups drop-down arrow and select Find groups by name.

5. In the Search field, start entering the name of the group. A list of groups that match the text appears in real time. Select the relevant group to push to Blameless.

6. Under the Match result & push action column header, change the drop-down option from Create Group to Link Group.
7. In the drop-down field below, select the Blameless-created group that your new Okta group should link to.
8. Click Save and, as before, monitor the push status to ensure that it becomes Active.