OKTA- 1016057 - Terraform OIG Guide #5828
Draft
+396
−0
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Netlify Preview URL for the changes: https://preview-5828--reverent-murdock-829d24.netlify.app |
Acrolinx scoreA minimum Acrolinx Score of 80 is required. The total score is an average of the subscores.
Successfully checked 59 of 59 documents. Reopen the pull request or push new changes to check again. Depending on the Acrolinx server configuration, the |
Acrolinx scoreA minimum Acrolinx Score of 80 is required. The total score is an average of the subscores.
Successfully checked 59 of 59 documents. Reopen the pull request or push new changes to check again. Depending on the Acrolinx server configuration, the |
vanngo-okta
reviewed
Dec 5, 2025
Contributor
vanngo-okta
left a comment
vanngo-okta
left a comment
There was a problem hiding this comment.
Please review the comments and we can discuss some structural changes.
| @@ -0,0 +1 @@ | |||
| Okta Access Certification Campaigns is a core Okta Identity Governance feature that allows stakeholders to conduct scheduled reviews of user access to apps and resources. Based on the reviews, Okta can then modify resource access so that the users are provided with only have the access they need. See [Campaigns](https://help.okta.com/okta_help.htm?type=oie&id=campaigns.htm) and [Campaigns API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Campaigns/). | |||
Contributor
There was a problem hiding this comment.
Suggested change
| Okta Access Certification Campaigns is a core Okta Identity Governance feature that allows stakeholders to conduct scheduled reviews of user access to apps and resources. Based on the reviews, Okta can then modify resource access so that the users are provided with only have the access they need. See [Campaigns](https://help.okta.com/okta_help.htm?type=oie&id=campaigns.htm) and [Campaigns API](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Campaigns/). | |
| Okta Access Certification Campaigns is a core Okta Identity Governance feature that allows stakeholders to conduct scheduled reviews of user access to resources, such as apps and groups. See [Campaigns](https://help.okta.com/okta_help.htm?type=oie&id=<NEED campaign alias>) in the product documentation and the [Campaigns](https://developer.okta.com/docs/api/iga/openapi/governance.api/tag/Campaigns/) API. |
| @@ -0,0 +1 @@ | |||
| Campaigns No newline at end of file | |||
Contributor
There was a problem hiding this comment.
The object is called "campaign", but if you're talking about the API resource name, it's usually plural, so "Campaigns API". This snippet might not work for all cases in your doc.
|
|
||
| #### What you need | ||
| - Familiarity with the Terraform terms, such as configuration, resources, state, and commands. | ||
| - An Okta org with the OIG SKU enabled. |
Contributor
There was a problem hiding this comment.
We don't use "SKU" in our public documentation.
| - A Terraform configuration that can access your Okta org. See [Okta provider configuration](#okta-provider-configuration). | ||
| - An Okta user account with the super administrator role. | ||
| - Terraform 1.8.5 or later. | ||
| - Okta Terraform provider 6.0.0 or later. |
Contributor
There was a problem hiding this comment.
Based on this changelog (https://github.com/okta/terraform-provider-okta/blob/master/CHANGELOG.md), a lot of OIG resources were added much later. Up until 6.5?
| - Terraform 1.8.5 or later. | ||
| - Okta Terraform provider 6.0.0 or later. | ||
|
|
||
| > **Note:** The instructions on this page are for the **<StackSnippet snippet="resource-name" inline/>** protocol. <br> |
Contributor
There was a problem hiding this comment.
Suggested change
| > **Note:** The instructions on this page are for the **<StackSnippet snippet="resource-name" inline/>** protocol. <br> | |
| > **Note:** The instructions on this page are for the **<StackSnippet snippet="resource-name" inline/>** resource. <br> |
| 1. Select **Enable** from the **Governance Engine** dropdown menu. | ||
| 1. Select **Save**. | ||
|
|
||
| > **Note:** The instructions on this page are for the **<StackSnippet snippet="resource-name" inline/>** protocol. <br> |
Contributor
There was a problem hiding this comment.
"protocol" -> "resource"
|
|
||
| ### Create a <StackSnippet snippet="resource-name" inline/> resource | ||
|
|
||
| 1. Create a resource block in your Terraform configuration file. For example, this sample defines an access review <StackSnippet snippet="resource-name" inline/> for a specific app. |
Contributor
There was a problem hiding this comment.
This will be challenging to use snippets if you don't keep the base sentence generic.
Suggested change
| 1. Create a resource block in your Terraform configuration file. For example, this sample defines an access review <StackSnippet snippet="resource-name" inline/> for a specific app. | |
| 1. Create a resource block in your Terraform configuration file. For example, this sample defines a/an <StackSnippet snippet="resource-name" inline/> block. |
| @@ -0,0 +1,10 @@ | |||
|
|
|||
Contributor
There was a problem hiding this comment.
This example is incorrect. You can't create a campaign with just the name.
| @@ -0,0 +1,9 @@ | |||
|
|
|||
|
|
|||
Contributor
There was a problem hiding this comment.
These "create" examples don't seem correct as they don't have the minimal required parameters.
|
|
||
| ```bash | ||
|
|
||
| data "okta_entitlement" test { |
Contributor
There was a problem hiding this comment.
okta_entitlement_bundle
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description:
Resolves: