Okta Workflows
Automate complex identity-centric processes without code
Okta Workflows' graphical interface makes automating business processes - like deprovisioning a user and transferring their files - quite simple. Use our library of connectors that includes Box, Slack, Salesforce, and more, or call APIs to customize your workflow.
Easily create workflows that run from left to right. In this example, every time a user is created, Okta creates a Salesforce record and sends a custom notification to a Slack channel.
NTT Data automates deployment of 120,000 users with Workflows
Workflows allows NTT DATA to customize automation based on user type and geography, making regulatory compliance seamless and eliminating manual processing errors. This automation has driven cost optimization and allowed the company to focus human resources on other initiatives that can’t be automated.
“I can take a project that might have had 50 people associated with it, and bring it down to two, which has given me enormous efficiency gains,” Williams says. “For my team, the power comes in how they can automate simplistic tasks in a no-code style environment.”
Take granular actions during onboarding and offboarding
Add user roles and permissions during account creation, or convert licenses from paid to free after account deactivation.
Enhance provisioning
Create a personal Box folder for a newly provisioned employee and add them to Slack rooms relevant to their role and function.
Deepen deprovisioning
Transfer a deprovisioned employee’s Box files and Salesforce contacts to a manager.
Nudge the right people to act
Notify managers, IT, or app owners after an account is deprovisioned or if an error occurs, so they can take further action.
Define identity processes based on time and context
Grant provisional access, pause processes, or make actions dependent on specific attributes, such as role or team membership.
Allow conditional access
Only grant access after checking a third-party system to see if a user has the correct set of permissions.
Give granular permissions
Revoke access to core business applications and files, while maintaining access to other services, like payroll information.
Grant time-bound access
If a user is inactive for 30 days, send an email warning. If there’s no activity within 24 hours, deactivate the account.
Resolve identity creation conflicts
Catch and fix conflicts during identity creation, such as duplicate usernames or emails.
Clean up messiness during account creation
Create unique identities and resolve user attribute conflicts during creation and import processes.
Simplify email address creation at scale
Automatically create valid email addresses for users with identical names and strip unsupported characters, like accents.
Distill and share important data quickly
Automatically create tables based on changes in user lifecycle states, and then share them across your organization on a regular schedule.
Send critical data to the right team
Automatically create a table of deactivated contractors and email it to the compliance team on the first of every month.
Regularly call out to a third-party system
Get a weekly report of all users who have not signed into Salesforce in the last month.
Learn more about Workflows
If you’re interested in Workflows, please reach out to your account manager and let them know. If you are not an Okta customer, click below to learn more.