How to Automate Access Request & Review with Okta

Video Setup Guide

Pre-requisites

Before you begin, make sure you have the following:

1. Admin access to Jira Service Management (JSM): Required to configure workflows, custom fields, and automation rules.
2. Admin access to Okta portal: Needed to authorize integrations and manage access provisioning.

1: Retrieve Okta API Credentials

To connect Okta with the Automate Access Request & Review, you’ll first need to generate an API token and retrieve your Okta domain.

Follow these steps:

• Log in to your Okta Admin Console.
• Navigate to: Security → API → Tokens.

• Click Create Token.

• Enter a name (e.g., Access Governance Token).

• Copy and securely store the generated token — you won’t be able to see it again.
• From the Okta dashboard, copy your Okta Domain URL.

Format: https://your-domain.okta.com.

2: Connect Okta to the Automate Access Request & Review App

Now that you have your Okta API credentials, it's time to integrate Okta with the Automate Access Request & Review App.

Steps to Integrate:

• Open App Connections from the sidebar.

• Click + Add Integration and choose Okta from the list.

• Fill in the connection details for Okta:

1. Connection Name: A friendly name to identify this Okta connection for other admins (e.g., "My Okta").
2. Application URL: Your Okta domain URL (e.g., https://your-tenant.okta.com). You can find it in Okta Admin Console → Settings → General.
3. Application Token: The API token generated in Okta Admin Console → Security → API → Tokens → Create Token.
4. Application Admin: Select a licensed Atlassian user who will manage this connection.
• Click Connect Okta to save the integration.

Configure Automation Rules for Okta

Now that Okta is connected, configure automation rules to define how access requests are routed, approved, and provisioned in Okta. Follow the guides below to set up each rule type:

• Application Access Automation Rule
• Group Membership Automation Rule
• Identity Lifecycle Management: HR Onboarding and HR Offboarding
• Privileged Access Automation Rule