Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions docs/organization/authentication/sso/okta-sso/okta-scim.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -108,11 +108,11 @@ Here's how to assign an organization-level role to an Okta group:
3. In the form, enter the string for the org-level role
![Okta Set Role](./img/okta-set-group-attribute.png)

- If the `sentryOrgField` field is left blank, group members will be provisioned with the default organization-level role. This default role can be configured in Sentry, under Settings -> Organization -> Auth. Otherwise, the role must be one of the following:
- Admin
- Manager
- Billing
- Member
- If the `sentryOrgRole` field is left blank, group members will be provisioned with the default organization-level role. This default role can be configured in Sentry, under Settings -> Organization -> Auth. Otherwise, the role must be one of the following:
- admin
- manager
- billing
- member
- Invalid role names will prevent group members from being provisioned. To try again, you'll need to remove the group first.
- For security reasons, the "Owner" role cannot be provisioned through SCIM. However, you <i>can</i> deprovision users who have the "Owner" role in Sentry, but aren't provisioned through SCIM.
- For self-hosted users with custom roles, this extends to any role with the `org:admin` permission
Expand Down