| Push new users |
- New users created through Okta are also created in Elastic Search.
- For governance-enabled instances, you can assign multiple roles when you create a user.
- For both governance-enabled and non-governance-enabled instances, the user is assigned an empty role when no role is selected.
|
| Push profile updates |
- Updates made to user profiles in Okta are applied in Elastic Search.
- You can only update the first name, last name, email, and roles.
- Editing an existing username and email simultaneously creates a new user account and deactivates the previous one.
|
| Push user deactivation |
Deactivating users or disabling their access to the app in Okta disables them in Elastic
Search.
|
| Reactivate users |
Reactivating users in Okta reactivates them in Elastic Search.
|
| Import new users |
Users created in Elastic Search are imported into Okta.
|
| Entitlement Management |
- Elastic Search supports Entitlement Management. You must enable this feature if you use Okta
Identity Governance.
- The supported field is Roles.
- The roles kibana_user and reporting_user are deprecated. Use kibana_admin or grant access using Kibana privileges instead.
|
| Push groups |
- You can push groups and their members to Elastic Search.
- Okta groups are mapped to role mappings in Elastic Search.
- When you add members to a group, the system assigns the least-privilege viewer role to that
group. You can only change this role from the Elastic Search console.
- You can't update the group display name or description.
- If a group already exists in Elastic Search, creating the same group again overrides the
existing group values.
|