> For the complete documentation index, see [llms.txt](https://docs.balkan.id/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.balkan.id/lifecycle-management/access-requests/new-resource-access-request.md).

# New resource access request

The New Resource Access Request System offers three primary functions:

* **Resource Creation**
* **Resource Assignment**
* **Resource Deletion**

Each function can be easily accessed through a simple selection process using radio buttons on our interface. Detailed steps on how to perform each action are provided below.

### **Resource Creation** <a href="#id-01htydy5vvtn6717azy1ttzsa0" id="id-01htydy5vvtn6717azy1ttzsa0"></a>

Creating a new Resource is a straightforward process that allows you to create new identities in the existing applications.

**Select Creation:** Choose the "Creation" radio button to initiate the resource creation process.\
**Choose a Provisioning Option:** Select a provisioning option.\
**Choose an Application:** Select the application where you want to create a new resource.\
**Choose a Resource Type:** Select a resource type from the existing resource types.\
**Select a name:** Select a name for the new access request.

<figure><img src="/files/hYpSs3cBuDRwOWqzrMC4" alt=""><figcaption></figcaption></figure>

**Fill the Payload:** Upon selecting an application, a visual/json (payload) will appear on the page with pre-filled values. Complete this form with the necessary information to create the new resource.

**Preview Your Request:** After filling out the form, proceed to the next page to preview your request. This ensures that all provided information is correct.

<figure><img src="/files/bptMLjXEVF5tTGOD5MoD" alt=""><figcaption></figcaption></figure>

**Create Request:** Click the "Create Request" button. Your request will be submitted for approval. The request will be visible in the my task page of the reviewer.

**Approval and Verification:** Once approved(from the my task page of the reviewer), the resource will be added to the selected application. You can verify the addition by checking within the respective application.

## **Payloads for different Okta Application Creation** <a href="#id-01hvrc9jbajk32gjehkwjepaa6" id="id-01hvrc9jbajk32gjehkwjepaa6"></a>

<details>

<summary><strong>BookMark Application</strong></summary>

```json
{
"name": "bookmark",
"label": "",
"sign_on_mode": "BOOKMARK",
"app_settings": {
"requestIntegration": false,
"url": "https://example.com/bookmark.htm"
}
}
```

</details>

<details>

<summary><strong>Basic Authentication application</strong></summary>

```json
{
"name": "template_basic_auth",
"label": "",
"sign_on_mode": "BASIC_AUTH",
"app_settings": {
 "url": "https://example.com/login.html",
 "authURL": "https://example.com/auth.html"
}
}
```

</details>

<details>

<summary><strong>Add Okta Org2Org application</strong></summary>

```json
{
"name": "okta_org2org",
"label": "",
"sign_on_mode": "SAML_2_0",
"app_settings": {
"acsUrl": "https://example.okta.com/sso/saml2/exampleid",
"audRestriction": "https://www.okta.com/saml2/service-provider/exampleid",
"baseUrl": "https://example.okta.com"
}
}
```

</details>

<details>

<summary><strong>Add SAML 2.0 Authentication application</strong></summary>

```json
{
"name": "cornerstone",
"label": "",
"sign_on_mode": "SAML_2_0",
"app_settings": {
 "orgName": "${yourOktaDomain}",
 "url": "https://example.com/login.html"
}
}
```

</details>

<details>

<summary><strong>Add plugin SWA application</strong></summary>

```json
{
"name": "template_swa",
"label": "",
"sign_on_mode": "BROWSER_PLUGIN",
"app_settings": {
"buttonField": "btn-login",
"passwordField": "txtbox-password",
"usernameField": "txtbox-username",
"url": "https://example.com/login.html",
"loginUrlRegex": "REGEX_EXPRESSION"
}
}
```

</details>

<details>

<summary><strong>Add plugin SWA (3 field) application</strong></summary>

```json
{
"name": "template_swa3field",
"label": "",
"sign_on_mode": "BROWSER_PLUGIN",
"app_settings": {
"buttonSelector": "#btn-login",
"passwordSelector": "#txtbox-password",
"userNameSelector": "#txtbox-username",
"targetURL": "https://example.com/login.html",
"extraFieldSelector": ".login",
"extraFieldValue": "SOMEVALUE",
"loginUrlRegex": "REGEX_EXPRESSION"
}
}
```

</details>

<details>

<summary><strong>Add SWA application (no plugin)</strong></summary>

```json
{
"name": "template_sps",
"label": "",
"sign_on_mode": "SECURE_PASSWORD_STORE",
"app_settings": {
"url": "https://example.com/login.html",
"passwordField": "#txtbox-password",
"usernameField": "#txtbox-username",
"optionalField1": "param1",
"optionalField1Value": "somevalue",
"optionalField2": "param2",
"optionalField2Value": "yetanothervalue",
"optionalField3": "param3",
"optionalField3Value": "finalvalue"
}
}
```

</details>

<details>

<summary><strong>Add WS-Federation application</strong></summary>

```json
{
"name": "template_wsfed",
"label": "",
"sign_on_mode": "WS_FEDERATION",
"app_settings": {
"audienceRestriction": "urn:example:app",
"groupName": null,
"groupValueFormat": "windowsDomainQualifiedName",
"realm": "urn:example:app",
"wReplyURL": "https://example.com/",
"attributeStatements": null,
"nameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified",
"authnContextClassRef": "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport",
"siteURL": "https://example.com",
"wReplyOverride": false,
"groupFilter": null,
"usernameAttribute": "username"
}
}
```

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.balkan.id/lifecycle-management/access-requests/new-resource-access-request.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.