diff --git a/content/01 Index/Abyssal Kelp Collective.md b/content/01 Index/Abyssal Kelp Collective.md index c51fa3a331836..002d5dabe5ced 100644 --- a/content/01 Index/Abyssal Kelp Collective.md +++ b/content/01 Index/Abyssal Kelp Collective.md @@ -16,7 +16,7 @@ Click on each project for more in depth explanations of the architecture and met ### [[WIP Project OtterVanguard]] OtterVanguard is a multi cloud organization that focuses on wildland fires and oceanic oil spills. This project covers various aspects of building and securing organization: -#### [[WIP DELETE OtterVanguard Serverless Multi-Tier Web Architecture]] +#### [[WIP OtterVanguard Serverless Multi-Tier Web Architecture]] OtterVanguard uses AWS serverless services to provide a website to inform the public of current oil spills. Spread simulations for current events and a portal to sign in and search for custom data. The website also includes developer dashboards to monitor website statistics. Website link here: vanguard.ottertech.cloud (to be added by end of September) diff --git a/content/01 Index/KF Okta Home.md b/content/01 Index/KF Okta Home.md index e53faccfab640..433b51976305a 100644 --- a/content/01 Index/KF Okta Home.md +++ b/content/01 Index/KF Okta Home.md @@ -2,6 +2,6 @@ This is the directory for all my hands on Okta practice. This is not my material and are just notes from various courses I have learned from. ## Identity Workforce -[[Assigning Permissions and Roles to Users]] +[[Assigning Admin Access to a User]] [[WIP Connecting Active Directory to Okta]] [[Adding Users to Okta]] diff --git a/content/02 Project Pool/WIP DELETE OtterVanguard Serverless Multi-Tier Web Architecture.md b/content/02 Project Pool/WIP OtterVanguard Serverless Multi-Tier Web Architecture.md similarity index 100% rename from content/02 Project Pool/WIP DELETE OtterVanguard Serverless Multi-Tier Web Architecture.md rename to content/02 Project Pool/WIP OtterVanguard Serverless Multi-Tier Web Architecture.md diff --git a/content/02 Project Pool/WIP Project OtterVanguard.md b/content/02 Project Pool/WIP Project OtterVanguard.md index fb38175dc3126..bdca6b571b76c 100644 --- a/content/02 Project Pool/WIP Project OtterVanguard.md +++ b/content/02 Project Pool/WIP Project OtterVanguard.md @@ -1,7 +1,7 @@ This project is a fully scaled enterprise focused on wildland fire tracking, oil spill prediction, analysis, and incident response. ## Overview This project covers various aspects of building an organization: -### [[WIP DELETE OtterVanguard Serverless Multi-Tier Web Architecture]] +### [[WIP OtterVanguard Serverless Multi-Tier Web Architecture]] OtterVanguard uses AWS serverless services to provide a website to inform the public of current oil spills. Spread simulations for current events and a portal to sign in and search for custom data. The website also includes developer dashboards to monitor website statistics. Website link here: otterhaven.ottertech.cloud (to be added by end of September) diff --git a/content/03 OtterLogs/2024.11 November OtterLog.md b/content/03 OtterLogs/2024.11 November OtterLog.md index 0ce54299961c5..e03df73b72ce1 100644 --- a/content/03 OtterLogs/2024.11 November OtterLog.md +++ b/content/03 OtterLogs/2024.11 November OtterLog.md @@ -1,7 +1,7 @@ 11/8 It's already past the first week of the month. The weather is getting colder and daylight is burning out faster. It's time to put in the work and create my own success in this 'winter arc'. ## IAM Concentration -I want to focus my efforts into IAM for the remainder of the year. In order to learn and specialize in a particular platform, I chose two for the time being: +I want to focus my efforts into IAM for the remainder of the year. ### SailPoint IdentityIQ I will be creating a virtual machine that runs SailPoint IdentityIQ. The plan is to have connectors like Active Directory to simulate a real world environment. @@ -11,6 +11,10 @@ I am currently working through Andrew Chanthaphone's "IAM Fundamentals with Okta With the hands on portion, I will create a couple hands on projects: (Add links here!) + +## Azure +Continue working on [[Entra ID]] as well as other infrastructure services. + ## JLPT N4 I only have three weeks out to study and I need to touch up on reading speed and comprehension. diff --git a/content/03 OtterLogs/2024.12 December OtterLog.md b/content/03 OtterLogs/2024.12 December OtterLog.md new file mode 100644 index 0000000000000..12dfb3a499ce5 --- /dev/null +++ b/content/03 OtterLogs/2024.12 December OtterLog.md @@ -0,0 +1,3 @@ +This month was a pretty challenging one. I took the JLPT N4, met a good friend and caught a cold while basking in the cold. + +I didn't work on studying much for any tech certs but went deep into Japanese to gear up for the test. I found Kaishi deck to prep me for it and I feel like it went suprisingly well. \ No newline at end of file diff --git a/content/03 OtterLogs/2025.01 January.md b/content/03 OtterLogs/2025.01 January.md new file mode 100644 index 0000000000000..e69de29bb2d1d diff --git a/content/04 OtterThoughts/Discovering Digital Minimalism.md b/content/04 OtterThoughts/Discovering Digital Minimalism.md new file mode 100644 index 0000000000000..56f97ad10b448 --- /dev/null +++ b/content/04 OtterThoughts/Discovering Digital Minimalism.md @@ -0,0 +1,3 @@ +I wanted to write this since I found that after decluttering all my physical possessions, I still found that I was faced with the ultimate challenge ahead of me, my digital landscape. + +Growing up in the age of internet, these devices were always around me. While the wonder of technology fueled my current endeavors, I did not know that this amazing invention would lead to periods of destruction and rebirth. \ No newline at end of file diff --git a/content/04 OtterThoughts/Embracing Minimalism to Own More in Life.md b/content/04 OtterThoughts/Embracing Minimalism to Own More in Life.md index 4e45fec901c5a..35db904dd3c61 100644 --- a/content/04 OtterThoughts/Embracing Minimalism to Own More in Life.md +++ b/content/04 OtterThoughts/Embracing Minimalism to Own More in Life.md @@ -13,9 +13,7 @@ Space in this sentence is the physical as well as the mental. ### Physical Space ### Mental Space - - - +I noticed that after decluttering to the things I only needed, I ## Minimalism Definition First off, while there are many different interpretations on minimalism, I would like to define what minimalism means to me. diff --git a/content/04 OtterThoughts/My JLPT N4 Experience.md b/content/04 OtterThoughts/My JLPT N4 Experience.md new file mode 100644 index 0000000000000..e69de29bb2d1d diff --git a/content/04 OtterThoughts/Road to JLPT N4.md b/content/04 OtterThoughts/Road to JLPT N4.md index a2d83e1d1de64..4e50db7f25a9d 100644 --- a/content/04 OtterThoughts/Road to JLPT N4.md +++ b/content/04 OtterThoughts/Road to JLPT N4.md @@ -8,4 +8,3 @@ Now that I have registered for the N4, I will utilize the immersion method to le - diff --git a/content/Okta Kelp Forest/Adding Network Zones.md b/content/Okta Kelp Forest/Adding Network Zones.md new file mode 100644 index 0000000000000..e69de29bb2d1d diff --git a/content/Okta Kelp Forest/Assigning Permissions and Roles to Users.md b/content/Okta Kelp Forest/Assigning Admin Access to a User.md similarity index 100% rename from content/Okta Kelp Forest/Assigning Permissions and Roles to Users.md rename to content/Okta Kelp Forest/Assigning Admin Access to a User.md diff --git a/content/Okta Kelp Forest/Configure Salesforce to Okta using SAML 2.0.md b/content/Okta Kelp Forest/Configure Salesforce to Okta using SAML 2.0.md new file mode 100644 index 0000000000000..15278458dc037 --- /dev/null +++ b/content/Okta Kelp Forest/Configure Salesforce to Okta using SAML 2.0.md @@ -0,0 +1,97 @@ +--- +tags: + - okta + - iam +--- +This is a follow along from Bryan Ly's Okta Course on Udemy. + +# Objectives +Create a Salesforce Developer Account +Connect Salesforce to Okta using SAML 2.0 +Test SSO from Okta to Salesforce + +# Create a Salesforce Developer Account +https://developer.salesforce.com/signup + +Enter your credentials to gain access to Salesforce: + +![[Pasted image 20241218112341.png]] + +After submitting the form, go to the email used and look for the account verification: + +![[Pasted image 20241218112812.png]] + +Reset your password and login to Salesforce: + +![[Pasted image 20241218113057.png]] + +# Add Salesforce in Okta +In Okta, go to Applications > Browse App Catalog > Search for Salesforce: + +![[Pasted image 20241218113355.png]] + +![[Pasted image 20241218113514.png]] + +Select Salesforce and click on Add Integration: + +![[Pasted image 20241218113604.png]] + +In the Sign On options, Select 'SAML 2.0' and for Application username format select 'Custom': + +Enter the Okta Expression Language ``` +``` +substringBefore(user.email, '@')+"YOURDOMAINHERE" +``` + + +![[Pasted image 20241218114910.png]] + +Select Done. + +# Configure Salesforce Settings + +In the top left search box, search for Single Sign-On settings: + +![[Pasted image 20241218121556.png]] + +For first time setup, enable SAML by clicking the Edit and tick the 'SAML Enabled', click save: + +![[Pasted image 20241218122144.png]] + +![[Pasted image 20241218122216.png]] + +Create a new settings by selecting the 'New' button: + + +Inside the Okta portal in the Salesforce application, there is a SAML setup guide, there will be data we need to enter into Salesforce. + + ![[Pasted image 20241218123231.png]] +![[Pasted image 20241218123558.png]] + +Cross reference and fill out the data in Salesforce: + +![[Pasted image 20241218124149.png]] + +After saving, take note of the Endpoints section, we will use this to input into the application section in Okta: + +![[Pasted image 20241218124936.png]] + +In Okta, paste the data into Advanced Sign-On Settings: + +![[Pasted image 20241218125155.png]] + +Assign users to the Salesforce application in Okta. +![[Pasted image 20241218130257.png]] +We are now ready to test our integration. + +# Test Connection +In the user portal, select the Salesforce.com app: + +![[Pasted image 20241218131053.png]] + +It should direct you straight into the Salesforce portal: + +![[Pasted image 20241218131139.png]] +# Things to Note +When assigning users to Salesforce in Okta, I had an issue where the user did not have the '@' sign added to their username so Salesforce ran into an error. We can fix this during the user assignment process. + diff --git a/content/Okta Kelp Forest/Okta Password Policies.md b/content/Okta Kelp Forest/Okta Password Policies.md new file mode 100644 index 0000000000000..e69de29bb2d1d diff --git a/content/Okta Kelp Forest/Service Provider Initiated SAML Salesforce.md b/content/Okta Kelp Forest/Service Provider Initiated SAML Salesforce.md new file mode 100644 index 0000000000000..4dc6fb7a06179 --- /dev/null +++ b/content/Okta Kelp Forest/Service Provider Initiated SAML Salesforce.md @@ -0,0 +1,7 @@ +To enable the provider initiated SAML, we need to have a domain + + + + +# Login from Salesforce +Now that we have configured the settings, from the Salesforce login page, we can select the 'Login using Okta' \ No newline at end of file diff --git a/content/Okta Kelp Forest/WIP Add and configure a SWA Application.md b/content/Okta Kelp Forest/WIP Add and configure a SWA Application.md new file mode 100644 index 0000000000000..d09e0511e024a --- /dev/null +++ b/content/Okta Kelp Forest/WIP Add and configure a SWA Application.md @@ -0,0 +1,5 @@ +# End user flow + +# Administrator flow + +# AIW flow diff --git a/content/Pictures/Pasted image 20241218112341.png b/content/Pictures/Pasted image 20241218112341.png new file mode 100644 index 0000000000000..340af53345e4d Binary files /dev/null and b/content/Pictures/Pasted image 20241218112341.png differ diff --git a/content/Pictures/Pasted image 20241218112812.png b/content/Pictures/Pasted image 20241218112812.png new file mode 100644 index 0000000000000..4611ec3b436d7 Binary files /dev/null and b/content/Pictures/Pasted image 20241218112812.png differ diff --git a/content/Pictures/Pasted image 20241218113057.png b/content/Pictures/Pasted image 20241218113057.png new file mode 100644 index 0000000000000..2ebfa26b9c938 Binary files /dev/null and b/content/Pictures/Pasted image 20241218113057.png differ diff --git a/content/Pictures/Pasted image 20241218113355.png b/content/Pictures/Pasted image 20241218113355.png new file mode 100644 index 0000000000000..aa71bc729e0fe Binary files /dev/null and b/content/Pictures/Pasted image 20241218113355.png differ diff --git a/content/Pictures/Pasted image 20241218113514.png b/content/Pictures/Pasted image 20241218113514.png new file mode 100644 index 0000000000000..a9557b96c3185 Binary files /dev/null and b/content/Pictures/Pasted image 20241218113514.png differ diff --git a/content/Pictures/Pasted image 20241218113604.png b/content/Pictures/Pasted image 20241218113604.png new file mode 100644 index 0000000000000..85f063cd7cbe3 Binary files /dev/null and b/content/Pictures/Pasted image 20241218113604.png differ diff --git a/content/Pictures/Pasted image 20241218114910.png b/content/Pictures/Pasted image 20241218114910.png new file mode 100644 index 0000000000000..15f63cd22e083 Binary files /dev/null and b/content/Pictures/Pasted image 20241218114910.png differ diff --git a/content/Pictures/Pasted image 20241218121556.png b/content/Pictures/Pasted image 20241218121556.png new file mode 100644 index 0000000000000..91dbd165d470a Binary files /dev/null and b/content/Pictures/Pasted image 20241218121556.png differ diff --git a/content/Pictures/Pasted image 20241218122144.png b/content/Pictures/Pasted image 20241218122144.png new file mode 100644 index 0000000000000..b6057d6cb1b9f Binary files /dev/null and b/content/Pictures/Pasted image 20241218122144.png differ diff --git a/content/Pictures/Pasted image 20241218122216.png b/content/Pictures/Pasted image 20241218122216.png new file mode 100644 index 0000000000000..0be344b2730e7 Binary files /dev/null and b/content/Pictures/Pasted image 20241218122216.png differ diff --git a/content/Pictures/Pasted image 20241218123231.png b/content/Pictures/Pasted image 20241218123231.png new file mode 100644 index 0000000000000..a9b044325a67c Binary files /dev/null and b/content/Pictures/Pasted image 20241218123231.png differ diff --git a/content/Pictures/Pasted image 20241218123558.png b/content/Pictures/Pasted image 20241218123558.png new file mode 100644 index 0000000000000..646822eb1db47 Binary files /dev/null and b/content/Pictures/Pasted image 20241218123558.png differ diff --git a/content/Pictures/Pasted image 20241218124149.png b/content/Pictures/Pasted image 20241218124149.png new file mode 100644 index 0000000000000..17fa0fe876854 Binary files /dev/null and b/content/Pictures/Pasted image 20241218124149.png differ diff --git a/content/Pictures/Pasted image 20241218124936.png b/content/Pictures/Pasted image 20241218124936.png new file mode 100644 index 0000000000000..f82f9f7616ee4 Binary files /dev/null and b/content/Pictures/Pasted image 20241218124936.png differ diff --git a/content/Pictures/Pasted image 20241218125155.png b/content/Pictures/Pasted image 20241218125155.png new file mode 100644 index 0000000000000..1af2c9eba7ab8 Binary files /dev/null and b/content/Pictures/Pasted image 20241218125155.png differ diff --git a/content/Pictures/Pasted image 20241218130257.png b/content/Pictures/Pasted image 20241218130257.png new file mode 100644 index 0000000000000..3bbc38cb580e8 Binary files /dev/null and b/content/Pictures/Pasted image 20241218130257.png differ diff --git a/content/Pictures/Pasted image 20241218131053.png b/content/Pictures/Pasted image 20241218131053.png new file mode 100644 index 0000000000000..9c505c4f9cb0c Binary files /dev/null and b/content/Pictures/Pasted image 20241218131053.png differ diff --git a/content/Pictures/Pasted image 20241218131139.png b/content/Pictures/Pasted image 20241218131139.png new file mode 100644 index 0000000000000..62b69b8fc6f24 Binary files /dev/null and b/content/Pictures/Pasted image 20241218131139.png differ diff --git a/content/SailPoint Kelp Forest/Adding an Authoritative Source.md b/content/SailPoint Kelp Forest/Adding an Authoritative Source.md new file mode 100644 index 0000000000000..e69de29bb2d1d diff --git a/content/SailPoint Kelp Forest/SailPoint Index.md b/content/SailPoint Kelp Forest/SailPoint Index.md new file mode 100644 index 0000000000000..80af4b27333cd --- /dev/null +++ b/content/SailPoint Kelp Forest/SailPoint Index.md @@ -0,0 +1,9 @@ +IdentityIQ +[[WIP Installing SailPoint IdentityIQ]] +[[Adding an Authoritative Source]] +Identity Life Cycle +Automatic Role Configuration +Application Configuration and Request +Role Mining +Access Certification +Separation of Duties (Toxic Configuration) \ No newline at end of file diff --git a/content/Shells of Mastery/Okta Certified Professional Hands-On Configuration Exam.md b/content/Shells of Mastery/Okta Certified Professional Hands-On Configuration Exam.md new file mode 100644 index 0000000000000..791f010474360 --- /dev/null +++ b/content/Shells of Mastery/Okta Certified Professional Hands-On Configuration Exam.md @@ -0,0 +1,47 @@ + +| | | +| ----------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Exam Section | Percentage of Exam Related to Section | +| #### Identity and Access Management | 20% | +| ##### Single Sign-On (SSO) Federation | | +| 12/17 Based on a given use case, demonstrate knowledge of whether SAML, WS-FED, or OIDC should be used | Preparation resources:

- [OIDC app integrations](https://help.okta.com/oie/en-us/Content/Topics/Apps/apps-about-oidc.htm?cshid=ext_apps_about_oidc)
- [SAML app integrations](https://help.okta.com/okta_help.htm?id=ext-apps-about-saml) | +| Demonstrate knowledge of IdP versus SP initiated flows | Preparation resources:

- [SAML app integrations](https://help.okta.com/oie/en-us/Content/Topics/Apps/apps-about-saml.htm?cshid=ext-apps-about-saml)
- [Planning for SAML](https://developer.okta.com/docs/concepts/saml/#planning-for-saml) | +| ##### Single Directory Integration | | +| Demonstrate knowledge of the Active Directory integration options with Okta | Preparation resources:

- [Import Active Directory users on demand](https://help.okta.com/okta_help.htm?id=ext-ad-agent-import-users)
- [Install multiple Okta Active Directory agents](https://help.okta.com/oie/en-us/Content/Topics/Directory/ad-agent-install-multiple.htm?cshid=ext-install-multiple-AD-agents)
- [Active Directory integration prerequisites](https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-prerequisites.htm) | +| #### User Lifecycle Management | 27% | +| ##### Okta as a Directory | | +| Demonstrate knowledge of the purpose of Universal Directory | Preparation resources:

- [About user account status](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-end-user-states.htm?cshid=ext_end_user_states)
- [Create group rules](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-about-group-rules.htm?cshid=ext_Create_Group_Rules) | +| Demonstrate knowledge of custom attributes, mappings, and data transformation | Preparation resources:

- [Active Directory attribute mappings to Okta properties](https://help.okta.com/okta_help.htm?type=oie&id=ext_Directory_AD_Field_Mappings)
- [Map application attributes on the Provisioning page](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-map-attributes-provisioning.htm?cshid=ext_app_map) | +| ##### Provisioning | | +| Demonstrate knowledge of when to use Okta user states and statuses (active, suspended, password reset, etc.) | Preparation resources:

- [About user account status](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-end-user-states.htm?cshid=ext_end_user_states) | +| Demonstrate knowledge of how to use app assignments, requests, and automations to provision applications to users | Preparation resources:

- [Provision on-premises application](https://help.okta.com/oie/en-us/Content/Topics/Provisioning/opp/OPP-main.htm?cshid=ext_OPP_configure)
- [Provision applications](https://help.okta.com/oie/en-us/Content/Topics/Apps/Provisioning_Deprovisioning_Overview.htm?cshid=ext_Provisioning_Deprovisioning_Overview) | +| #### Security | 27% | +| ##### Basic Multifactor Authentication (MFA) | | +| Demonstrate knowledge of authenticators, factor types, and method characteristics, enrollment, and reset | Preparation resources:

- [Multifactor Authentication](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/authenticators/about-authenticators.htm?cshid=ext-about-authenticators)
- [About MFA authenticators](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/authenticators/configure-authenticators.htm) | +| ##### Policies | | +| Demonstrate knowledge of Okta policy types and their functions | Preparation resources:

- [Global session policies](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/policies/about-okta-sign-on-policies.htm?cshid=ext-about-osop)
- [Authentication policies](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/policies/about-app-sign-on-policies.htm?cshid=ext-about-asop) | +| ##### Devices, Passwordless Authentication, and Okta FastPass | | +| Demonstrate knowledge of passwordless authentication and Okta Fastpass | Preparation resources:

- [Devices](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/devices/devices-main.htm?cshid=ext-devices-main)
- [Okta FastPass](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/devices/fp/fp-main.htm) | +| Demonstrate knowledge of Okta Verify | Preparation resources:

- [Configure Okta Verify options](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/authenticators/configure-okta-verify-options.htm)
- [Multifactor Authentication](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/authenticators/about-authenticators.htm?cshid=ext-about-authenticators) | +| #### Administration and Troubleshooting | 27% | +| ##### Logging and Reporting | | +| Demonstrate understanding of Okta System Log and reports | Preparation resources:

- [Customer Data Retention Policy](https://support.okta.com/help/s/article/Customer-Data-Retention-Policy?language=en_US)
- [Reports](https://help.okta.com/oie/en-us/Content/Topics/Reports/report-types.htm?cshid=ext-report-types)
- [System Log](https://help.okta.com/oie/en-us/Content/Topics/Reports/Reports_SysLog.htm?cshid=ext_Reports_SysLog) | +| Be able to use the Tasks section of the dashboard to monitor tasks | Preparation resources:

- [Monitor your tasks](https://help.okta.com/oie/en-us/Content/Topics/Dashboard/monitor-your-tasks.htm?cshid=ext-monitor-your-tasks) | +| ##### Customer Support Practices | | +| Demonstrate knowledge of the Help and Support Process (including Trust.okta.com and the Okta help center) | Preparation resources:

- [Okta Status Page](https://status.okta.com/)
- [How to Create a Support Case](https://support.okta.com/help/s/article/How-to-Create-a-Support-Case?)
- [Okta Customer Support and Success Services](https://www.okta.com/support-terms/) | + +### Part II subject areas + +The following table lists the use cases and tasks that are assessed in this exam. Each task in the exam is demonstrated in one of the resources that are provided in the table. Use this list as an outline to guide your study and validate your readiness for the exam. + +| | | +|---|---| +|##### Use Case|##### Percentage of Exam Related to Use Case| +|#### Account Creation|25%| +|Configuration tasks:

- Create users
- Create a custom attribute
- Assign admin roles
- Update user profiles
- Create groups
- Create group rules
- Assign users to groups|Preparation resources:

- [Manage users](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-people.htm?cshid=ext_Directory_People)
- [Administrators](https://help.okta.com/oie/en-us/Content/Topics/Security/Administrators.htm?cshid=ext_Administrators)
- [Edit users attributes](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-edit-user-attributes.htm?cshid=ext-usgp-edit-user-attributes)
- [About groups](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-about-groups.htm?cshid=ext_Directory_Groups)
- [About group rules](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-about-group-rules.htm?cshid=ext_Group_Rules)
- [Manually assign people to group](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-assign-group-people.htm?cshid=ext-usgp-assign-group-people)| +|#### Application Setup with OIN|30%| +|Configuration tasks:

- Add an app integration from the Okta Integration Network
- Set up inbound SAML
- Set up lifecycle management
- Assign a group to the application
- Verify a user can access the application|Preparation resources:

- [How to configure SAML 2.0 for Okta Org2Org application](https://saml-doc.okta.com/SAML_Docs/Configure-SAML-2.0-for-Org2Org.html)
- [Configure provisioning for an app integration](https://help.okta.com/oie/en-us/Content/Topics/Provisioning/lcm/lcm-provision-application.htm?cshid=ext_prov_lcm_prov_app)
- [Assign a single app to groups](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-assign-app-group.htm?cshid=ext-usgp-assign-app-group)
- [Manage users](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-people.htm?cshid=ext_Directory_People)| +|#### Security Enforcement|25%| +|Configuration tasks:

- Add and remove authenticators
- Configure enrollment options for authenticators
- Create a Global session policy rule
- Define an authentication policy and rule|Preparation resources:

- [Multifactor Authentication](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/authenticators/about-authenticators.htm?cshid=ext-about-authenticators)
- [About authenticator enrollment policies and rules](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/policies/about-mfa-enrollment-policies.htm?cshid=ext-about-mfa-enrol-policies)
- [Global session policies](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/policies/about-okta-sign-on-policies.htm?cshid=ext-about-osop)
- [Authentication policies](https://help.okta.com/oie/en-us/Content/Topics/identity-engine/policies/about-app-sign-on-policies.htm?cshid=ext-about-asop)| +|#### Attribute Mapping and Offboarding|20%| +|Configuration tasks:

- Define attribute mappings to push attributes from Okta to an application
- Deactivate a user
- Verify a user is deactivated|Preparation resources:

- [Map Okta attributes to app attributes in the Profile Editor](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-map-attributes.htm?cshid=csh-usgp-map-attributes)
- [Deactivate and delete user accounts](https://help.okta.com/okta_help.htm?type=oie&id=ext-usgp-deactivate-user-account)
- [Manage users](https://help.okta.com/oie/en-us/Content/Topics/users-groups-profiles/usgp-people.htm?cshid=ext_Directory_People)| \ No newline at end of file