Applies to: Okta

Summary

This article provides instructions for managing users in Okta when Okta Integration is configured as Auth & Provisioning.

IMPORTANT: This process requires coordination between the Cloud Portal 
Administrator and the Okta IT Administrator.

Assigning Users (Okta IT Admin)

To assign users in Otka: 

1. Log in to Okta and go to the Admin page.
    
2. In the navigate bar on the left, click Admin Console > Applications > Applications
   
   
    
3. Click Hanwha Vision Cloud.
   
   
    
4. Click the Assignments tab then select Assign to People from the Assign drop-down menu.
   
   
    
5. Click Assign to add the user to the app.
   
   
    
6. Verify the user attributes (Email, First Name, Last Name) and click Save and Go Back.
   
   
   
   Once assigned in Okta, the following actions occur automatically in Cloud Portal via SCIM:
   
   If the user does not exist in Cloud Portal, a new SSO account is created instantly.
   
   If a Hanwha account with the same email already exists in the organization, it is automatically converted to an SSO account. The user's existing role is preserved during this transition.

Verifying the SSO Account has been Added (Cloud Portal Admin)

To verify the SSO account has been added:

1. Log in to Cloud Portal. 
    
2. Navigate to the Users page in Cloud Portal.
   
   The SSO label appears next to the synchronized users.
   
   
   
   It may take some time for the synchronization to complete. If you do not see the updated user list or the SSO labels immediately, refresh the Users page.
   
   Once a user is managed via Provisioning, their profile details (First Name, Last Name, and Phone number) are mastered by Okta. These fields become Read-only in Cloud Portal to ensure data integrity. All profile updates must be made within Okta.

NOTE: When a user is Unassigned or Deactivated in Okta, their access to 
Cloud Portal is automatically revoked or the account is removed based on 
your SCIM settings. 

Removing Users (Okta IT Admin)

To remove a user:

1. Log in to Okta and go to the Admin page.
    
2. In the navigate bar on the left, click Admin Console > Directory > People. 
   
   
    
3. Select the account you want to remove.
   
   
    
4. Select More Actions > Deactivate.