Add a Group to the Application in an Okta IdP

Last updated
Save as PDF

Limited Availability: To access SCIM Provisioning, contact Skyhigh Support.

Once the group is created, you must add it to the Skyhigh SSE SCIM-enabled application created in the IdP. Then the group must be pushed to Skyhigh via SCIM.

Once the group is pushed to Skyhigh, it appears on the Settings > User Management > Users and Roles > Users tab under the Linked Groups column. By default, these synchronized groups follow a Zero Trust model; they are imported without any predefined roles or permissions. A Skyhigh administrator must then manually assign the required access levels to the group to enable user permissions.

Add a Group to the Application in an IdP and Push the Group to Skyhigh

To add a group to the application, perform the following steps:

Log in to the Okta dashboard.
On the Admin Console, select Applications > Applications.
On the Applications page, select the desired application.
On the Assignments tab, select Assign > Assign to Groups.
On the Assign to Groups dialog, search for the desired group and click Assign.
Click Save and Go Back.
Click Done.

You have successfully assigned a group to the application.

21- Group is aded to the application.png

To push groups to the Skyhigh User Management page, perform the following steps:

On your application, select the Push Groups tab.
Select Push Groups > Find groups by name.
In the search field, enter the group name and select it.
Click Save.

Now, log in to the Skyhigh dashboard, select Settings > User Management > Users and Roles > click the Users tab to view the groups pushed from the IdP.

11-after gropu assignment_in Skyhigh.png

NOTE: After you assign a group to the application and push that group to Skyhigh, any subsequent users added to the group within your Identity Provider are automatically provisioned. These newly added users will automatically appear on the Skyhigh Users and Roles > Users tab, associated with their respective Linked Group.

For details on managing SCIM users and groups in Skyhigh, see Manage SCIM Users in Skyhigh.