11-15: AppCenter Improvements

Avoid conflicts between ELM and App Center

Earlier, if a user was removed by ELM, they may be unable to regain access through App Center’s automated fulfillment via Okta. This happened because the user was still/already in the Okta group that fulfills app access requests, but since they were individually removed from the application, the override continued to take effect.

This is now fixed. Now, during App Center fulfillment, we first individually assign the app to the user, and convert it to group assignment. This resets any individual user override that might be excluding the user from the app, hence undo’s any deprovisioning done via ELM. (related Okta Doc)

Okta group autocomplete in app center settings

We've enhanced the app center settings to provide Okta group autocomplete suggestions for admins setting up fulfillment via Okta. This will help prevent errors caused by typos and make the process more efficient.