Aggregation Settings

Configure how your system handles aggregation.

For more information about aggregation, refer to Loading Account Data.

Filter Settings

Set the condition to filter out the accounts and groups in the respective fields.

Filter Conditions For Accounts

For example, if the added filter is status eq "STAGED" then only the staged accounts are aggregated. Refer to the following table:

Filter	Description
status eq "STAGED"	Users that have a status of STAGED
status eq "PROVISIONED"	Users that have a status of PROVISIONED
status eq "ACTIVE"	Users that have a status of ACTIVE
status eq "RECOVERY"	Users that have a status of RECOVERY
status eq "PASSWORD_EXPIRED"	Users that have a status of PASSWORD_EXPIRED
status eq "LOCKED_OUT"	Users that have a status of LOCKED_OUT
status eq "DEPROVISIONED"	Users that have a status of DEPROVISIONED
lastUpdated lt "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Users last updated before a specific timestamp
lastUpdated eq "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Users last updated at a specific timestamp
lastUpdated gt "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Users last updated after a specific timestamp
id eq "00u1ero7vZFVEIYLWPBN"	Users with a specified ID
profile.login eq "login@example.com"	Users with a specified login
profile.email eq "email@example.com"	Users with a specified email address
profile.firstName eq "John"	Users with a specified firstName
profile.lastName eq "Smith"	Users with a specified lastName
profile.Custom_Integer_Array eq "23"	Users with a specified array attribute
profile.Custom_String eq "Custom Value for String__Updated"	Users with a specified custom attribute

Filter Conditions For Groups

This setting is optional however it is available by default. The filter brings a subset of Groups during aggregation, for example type eq "OKTA_GROUP". The default filter (type eq "BUILT_IN" or type eq "OKTA_GROUP") only aggregates Okta and Built-In groups.

Filter	Description
type eq "OKTA_GROUP"	Groups that have a type of OKTA_GROUP
type eq "APP_GROUP"	Groups that have a type of APP_GROUP
type eq "BUILT_IN"	Groups that have a type of BUILT_IN
lastUpdated lt "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Groups with profile last updated before a specific timestamp
lastUpdated eq "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Groups with profile last updated at a specific timestamp
lastUpdated gt "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Groups with profile last updated after a specific timestamp
lastMembershipUpdated lt "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Groups with memberships last updated before a specific timestamp
lastMembershipUpdated eq "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Groups with memberships last updated at a specific timestamp
lastMembershipUpdated gt "yyyy-MM-dd'T'HH:mm:ss.SSSZ"	Groups with memberships last updated after a specific timestamp
id eq "00g1emaKYZTWRYYRRTSK"	Group with a specified ID

Delta Aggregation

Enable Delta Aggregation for account aggregation.

For more information, refer to How do I configure delta aggregations for my source?​ for details.

Log data older than 90 days is not returned in accordance with Okta's Data Retention Policy. This means that any data changes done prior to 90 days since the last successful account aggregation isn't be captured and a full account aggregation will be required.

The Okta source uses the Log API instead of the Event API for delta aggregation. There is a replacement of the Event API entry with the Log API in the source XML file.

Page Size Settings

1. Set the User Page Size. This is the maximum size of each dataset when querying large number of objects. The minimum value is 1 and maximum value is 200. Default: 200

2. Enter the Group Page Size value. This is the maximum size of each dataset while querying a large number of Groups. The default value is 10000, you set and change as per your requirement.

3. Enter the Logs Page Size value. This is the maximum size of each dataset while querying large number of Logs. The default value is 1000, you set and change as per your requirement.

Note
The group filter will apply for both account and entitlement aggregation.