2 Replies Latest reply on Feb 28, 2017 2:18 PM by petery

    Okta provisioning in very large batches?

      We were planning on using the Okta Provisioning API functionality for our global launch, giving two AD groups access to the Jive app in Okta, which would immediately provision Jive user accounts. These two groups are our all employees AD group (about 10K members) and a group that makes up a signification portion of our contractor base (about 5K members). The short story is that we planned on provisioning 15K users in this fashion.

       

      There is nothing stopping us from going this way on the Okta side, but in opening up a support case with Jive Support I've been told that we need to limit our provisioning to groups of ten users or so if we want to avoid timeouts. This seems to completely defeat the purpose of automated provisioning; this would take one person days to do. This is also very disconcerting because our organization could add or remove hundreds of people in a single day; this suggests that day to day operations would similarly cause timeout issues.

       

      How are other customers handling this? What is the limit for group-based provisioning via the Okta API?

       

      cc Tim Smith Bethany Cook Donna Skoog

        • Re: Okta provisioning in very large batches?
          gregorytdunn91

          I came across this same issue. However I was able to do it when I broke it up to batches of 500. We use Okta and provision to Jive via api. I did it by batches of 500 for 20,000 users. I was able to do this just two months ago.  I had a group in Okta than controlled application access and provisioned two apps for each group member (including Jive Cloud).

           

          For each batch, I did the following:

           

          - Uploaded batch into okta via csv in format required

          - Ran nodejs script with same CSV

          1. Read csv
          2. Grabbed each user ID using their email
          3. Added to user to Group in Okta by id (which provisioned the Jive app and Vartopia)

          - Activated users in okta

           

          I did this 20 times and the entire process took about 4hrs.

           

          I am happy to share the script I wrote but would prefer to not make it publicly accessible (would want to remove all sensitive information in it as well).

            • Re: Okta provisioning in very large batches?
              petery

              Do you have ability to periodically push user profiles after provisioning from OKTA to JIVE without the user physically logging on through OKTA?

               

              Has there been enhancements on OKTA SCIM to Jive in 2016?

              Provisioning with Lifecycle Management | Okta Developer

               

               

              OKTA Attribute

              JIVE value

              displayfirstName

              FirstName

              displaylastName

              LastName

              jiveemail

              mail

              corporateTitle

              corporatetitle

              title

              title

              department

              department

              middleName

              middleName

              corporate_ext

              CorporateExtension

              physicalDeliveryOfficeName

              physicalDeliveryOfficeName

              company_code

              companyCode

              primaryPhone

              primaryPhone

              mobilePhone

              mobilePhone

              functionalTitle

              functionalTitle

              extName

              extName

              nickName

              nickName

              assistant

              assistant

              fax

              fax