Skip to content

Commit

Permalink
Apply additional tech feedback changes
Browse files Browse the repository at this point in the history
Signed-off-by: Diana <[email protected]>
  • Loading branch information
cloudjumpercat committed Nov 19, 2024
1 parent 95104ce commit db2ec43
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 14 deletions.
12 changes: 6 additions & 6 deletions app/_includes/md/konnect/generic-sso.md
Original file line number Diff line number Diff line change
Expand Up @@ -57,11 +57,11 @@ The {{site.konnect_short_name}} OIDC integration allows you to configure various
1. In {{site.konnect_saas}}, go to {% konnect_icon organizations %} **Organization** > **Settings**, click the **Team Mappings** tab and do at least one of the following:

* To manage user and team memberships in {{site.konnect_short_name}} from the Organization settings, select the **Konnect Mapping Enabled** checkbox.
* To assign team memberships by the IdP during SSO login via group claims mapped to {{site.konnect_short_name}} teams, select the **IdP Mapping Enabled** checkbox and enter your Okta groups in the relevant fields.
* To assign team memberships by the IdP during SSO login via group claims mapped to {{site.konnect_short_name}} teams, select the **IdP Mapping Enabled** checkbox and enter your IdP groups in the relevant fields.

Each {{site.konnect_short_name}} team can be mapped to **one** Okta group.
Each {{site.konnect_short_name}} team can be mapped to **one** IdP group.

For example, if you have a `service_admin` group in Okta, you might map it
For example, if you have a `service_admin` group in your IdP, you might map it
to the `Service Admin` team in {{site.konnect_short_name}}. You can hover
over the info (`i`) icon beside each field to learn more about the team, or
see the [teams reference](/konnect/org-management/teams-and-roles/teams-reference/)
Expand Down Expand Up @@ -112,11 +112,11 @@ The {{site.konnect_short_name}} SAML integration allows you to configure various
1. In {{site.konnect_saas}}, go to {% konnect_icon organizations %} **Organization** > **Settings**, click the **Team Mappings** tab and do at least one of the following:

* To manage user and team memberships in {{site.konnect_short_name}} from the Organization settings, select the **Konnect Mapping Enabled** checkbox.
* To assign team memberships by the IdP during SSO login via group claims mapped to {{site.konnect_short_name}} teams, select the **IdP Mapping Enabled** checkbox and enter your Okta groups in the relevant fields.
* To assign team memberships by the IdP during SSO login via group claims mapped to {{site.konnect_short_name}} teams, select the **IdP Mapping Enabled** checkbox and enter your IdP groups in the relevant fields.

Each {{site.konnect_short_name}} team can be mapped to **one** Okta group.
Each {{site.konnect_short_name}} team can be mapped to **one** IdP group.

For example, if you have a `service_admin` group in Okta, you might map it
For example, if you have a `service_admin` group in your IdP, you might map it
to the `Service Admin` team in {{site.konnect_short_name}}. You can hover
over the info (`i`) icon beside each field to learn more about the team, or
see the [teams reference](/konnect/org-management/teams-and-roles/teams-reference/)
Expand Down
16 changes: 8 additions & 8 deletions app/konnect/org-management/sso.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,28 +7,28 @@ As an alternative to {{site.konnect_saas}}’s native authentication, you can se

If you want to configure Okta, please see the [Okta configuration guide](/konnect/org-management/okta-idp/).

## Map {{site.konnect_short_name}} teams to Okta groups
## Map {{site.konnect_short_name}} teams to IdP groups

Before you enable SSO, you have the option to map Okta groups to [{{site.konnect_short_name}} teams](/konnect/org-management/teams-and-roles/). By doing this, you can manage a user's {{site.konnect_short_name}} team membership directly through Okta group membership.
Before you enable SSO, you have the option to map IdP groups to [{{site.konnect_short_name}} teams](/konnect/org-management/teams-and-roles/). By doing this, you can manage a user's {{site.konnect_short_name}} team membership directly through your IdP group membership.

After mapping is set up:
* Okta users belonging to the mapped groups can log in to {{site.konnect_short_name}}.
* When a user logs into {{site.konnect_short_name}} with their Okta account
* IdP users belonging to the mapped groups can log in to {{site.konnect_short_name}}.
* When a user logs into {{site.konnect_short_name}} with their IdP account
for the first time,
{{site.konnect_short_name}} automatically provisions an account with the
relevant roles.
* If your org already has non-admin {{site.konnect_short_name}} users before
mapping, on their next
login they will be mapped to the teams defined by their Okta group membership.
login they will be mapped to the teams defined by their IdP group membership.
* An organization admin can view all registered users in
{{site.konnect_short_name}},
but cannot edit their team membership from the {{site.konnect_short_name}} side. To
manage automatically-created users, adjust user permissions through Okta, or
manage automatically-created users, adjust user permissions through your IdP, or
adjust the team mapping.

Any changes to the mapped Okta groups on the Okta side are reflected in
Any changes to the mapped IdP groups on the IdP-side are reflected in
{{site.konnect_saas}}. For example:
* Removing a user from a group in Okta also deactivates their
* Removing a user from a group in your IdP also deactivates their
{{site.konnect_short_name}} account.
* Moving a user from one group to another changes their team in {{site.konnect_short_name}}
to align with the new group-to-team mapping.
Expand Down

0 comments on commit db2ec43

Please sign in to comment.