Gotcha! Hard-Won Lessons in Identity Automation | MacDevOps YVR | with Samuel Keeley
- Identity
The more you use Okta, the more you discover its “eccentricities”. As an organization scales, what starts as a simple identity provider quickly becomes a complex web of Group Rules, Terraform providers, manual overrides, and API-driven automation.
In this session, we’ll dive into the non-obvious behavior of Okta that frequently trips up even seasoned MacAdmins and security engineers. We’ll answer the “identity riddles” that keep you up at night. For example, what happens when a user is added to a group manually, then caught by a group rule, and then that rule is deleted? (Spoiler: The result isn’t always “clean’).
We will share the “gotchas” we’ve encountered at scale and, more importantly, the architectural patterns you can use to avoid them.