Skip to content

Managing Okta Entitlements

To display your Google Cloud Platform entitlement data in IdentityNow, you must mark supported entitlements as cloud enabled.

Supported Entitlement Types

IdentityNow supports the following GCP entitlements:

  • group

Marking Okta Cloud-Enabled Entitlement Types

When entitlements are pulled from your Okta cloud environment, you must mark the group entitlement types as Cloud Enabled in the Okta source configuration. This will allow certification campaign reviewers to view the access users have to your Okta cloud infrastructure.

  1. Go to Admin > Connections > Sources.
  2. Select the Okta identity governance connector you enabled to manage cloud resources.
  3. Select the Import Data tab and choose Entitlement Types.
  4. Edit and select the Cloud Enabled checkbox for the 'group' entitlement type.
  5. Select Update.

You can now view an identity's cloud access granted through entitlements. You can include cloud-based entitlement types to certification campaigns to allow certifiers to view the effective access to your Okta resources.

Viewing Effective Access to Okta Resources

After marking your entitlement types, you can include cloud-enabled entitlements in certification campaigns to allow your certifiers to view cloud access details like the last level of access and type of action taken on the resource.