New resource access request

The New Resource Access Request System offers three primary functions:

• Resource Creation

• Resource Assignment

• Resource Deletion

Each function can be easily accessed through a simple selection process using radio buttons on our interface. Detailed steps on how to perform each action are provided below.

Resource Creation

Creating a new Resource is a straightforward process that allows you to create new identities in the existing applications.

Select Creation: Choose the "Creation" radio button to initiate the resource creation process. Choose a Provisioning Option: Select a provisioning option. Choose an Application: Select the application where you want to create a new resource. Choose a Resource Type: Select a resource type from the existing resource types. Select a name: Select a name for the new access request.

Fill the Payload: Upon selecting an application, a visual/json (payload) will appear on the page with pre-filled values. Complete this form with the necessary information to create the new resource.

Preview Your Request: After filling out the form, proceed to the next page to preview your request. This ensures that all provided information is correct.

Create Request: Click the "Create Request" button. Your request will be submitted for approval. The request will be visible in the my task page of the reviewer.

Approval and Verification: Once approved(from the my task page of the reviewer), the resource will be added to the selected application. You can verify the addition by checking within the respective application.

Payloads for different Okta Application Creation

BookMark Application

{
"name": "bookmark",
"label": "",
"sign_on_mode": "BOOKMARK",
"app_settings": {
"requestIntegration": false,
"url": "https://example.com/bookmark.htm"
}
}

Basic Authentication application

{
"name": "template_basic_auth",
"label": "",
"sign_on_mode": "BASIC_AUTH",
"app_settings": {
 "url": "https://example.com/login.html",
 "authURL": "https://example.com/auth.html"
}
}

Add Okta Org2Org application

{
"name": "okta_org2org",
"label": "",
"sign_on_mode": "SAML_2_0",
"app_settings": {
"acsUrl": "https://example.okta.com/sso/saml2/exampleid",
"audRestriction": "https://www.okta.com/saml2/service-provider/exampleid",
"baseUrl": "https://example.okta.com"
}
}

Add SAML 2.0 Authentication application

{
"name": "cornerstone",
"label": "",
"sign_on_mode": "SAML_2_0",
"app_settings": {
 "orgName": "${yourOktaDomain}",
 "url": "https://example.com/login.html"
}
}

Add plugin SWA application

{
"name": "template_swa",
"label": "",
"sign_on_mode": "BROWSER_PLUGIN",
"app_settings": {
"buttonField": "btn-login",
"passwordField": "txtbox-password",
"usernameField": "txtbox-username",
"url": "https://example.com/login.html",
"loginUrlRegex": "REGEX_EXPRESSION"
}
}

Add plugin SWA (3 field) application

{
"name": "template_swa3field",
"label": "",
"sign_on_mode": "BROWSER_PLUGIN",
"app_settings": {
"buttonSelector": "#btn-login",
"passwordSelector": "#txtbox-password",
"userNameSelector": "#txtbox-username",
"targetURL": "https://example.com/login.html",
"extraFieldSelector": ".login",
"extraFieldValue": "SOMEVALUE",
"loginUrlRegex": "REGEX_EXPRESSION"
}
}

Add SWA application (no plugin)

{
"name": "template_sps",
"label": "",
"sign_on_mode": "SECURE_PASSWORD_STORE",
"app_settings": {
"url": "https://example.com/login.html",
"passwordField": "#txtbox-password",
"usernameField": "#txtbox-username",
"optionalField1": "param1",
"optionalField1Value": "somevalue",
"optionalField2": "param2",
"optionalField2Value": "yetanothervalue",
"optionalField3": "param3",
"optionalField3Value": "finalvalue"
}
}

Add WS-Federation application

{
"name": "template_wsfed",
"label": "",
"sign_on_mode": "WS_FEDERATION",
"app_settings": {
"audienceRestriction": "urn:example:app",
"groupName": null,
"groupValueFormat": "windowsDomainQualifiedName",
"realm": "urn:example:app",
"wReplyURL": "https://example.com/",
"attributeStatements": null,
"nameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified",
"authnContextClassRef": "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport",
"siteURL": "https://example.com",
"wReplyOverride": false,
"groupFilter": null,
"usernameAttribute": "username"
}
}