Skip to main content
New Participant
September 9, 2024
4. Future Consideration

Okta Groups suppor for Creator Studio Workflow Access

Related products:Agent Studio
  • September 9, 2024
  • 5 replies
  • 65 views

We are building out multiple creator studio workflows to support our Sales and Revenue teams, now.  Due to the nature of the data they can access via these workflows - we are looking to limit access to just those groups.  

 

The strongest indicator of team membership in our Okta instance is represented in Okta groups.  If we could get support for that as a way to grant Creator Studio Workflows, that would help remove the manual nature of access today. 

5 replies

neal
Employee
September 10, 2024

Hi Andrew! Currently the launch options in Creator Studio support using a Moveworks DSL Rule to launch your use case (reference: https://developer.moveworks.com/creator-studio/administration/launch-options/#4-launch-to-users-matching-the-rule).

 

The rules can be written based on data on the Moveworks profile, which can be mapped from the user’s Okta Profile. 

 

So if you can run a job or automation that calls this API (https://developer.okta.com/docs/api/openapi/okta-management/management/tag/Group/#tag/Group/operation/listGroupUsers), and the updates the user’s Okta profiles with an attribute, then Moveworks can key off of that attribute in the launch option.

 

Neal Vasan
onlyawaveAuthor
New Participant
September 24, 2024

Hey @neal , 

 

Thanks for sharing that info, and sorry for the delay.   For a few reasons, the team that runs our identity and auth prefers we use Okta groups for items like this.  Is there a way to officially request group support as a feature? 

 

Happy to chat about it more if that will help. 

 

Thank you! 

Ajay Merchia
Community Manager
October 2, 2024

Hey @onlyawave,

The request definitely makes sense and it’s something that we want to support in the platform one day.

Currently, making an external API call while the Copilot is deciding what plugins to select would hurt the ability of the Copilot to do effective reasoning & planning. 

We will continue to think about how to approach this with our engineers, but we don’t have a game plan just yet.

Ajay Merchia
Community Manager
October 2, 2024
1. New4. Future Consideration
New Participant
November 17, 2024

This is good feature to have. To avoid an external API call, Can Moveworks ingest user’s associated OKTA groups as well during SSO/AD sync? So that these groups will be referred via DSL?