Identity integrations live under Catalog, in the Identity and access group. They provision users into the platform. Okta also offers OpenID Connect sign-in.
Each connection
The role on the map is a role from Roles and Permissions. Changing the map changes which role a provisioned user receives. It does not edit the permissions inside the role.
- Okta at
/app/settings/catalog/okta. OpenID Connect for sign-in, and SCIM for provisioning. Map an Okta group to a platform role. - Active Directory at
/app/settings/catalog/active-directory. SCIM from Active Directory or Microsoft Entra ID, with the same kind of group-to-role map. - Google at
/app/settings/catalog/google. SCIM from Google Workspace or Cloud Identity, with a Google group mapped to a platform role.