On this page

Okta SCIM User and Project/Role Management

Manage Statsig users from Okta using SCIM provisioning so accounts are created, updated, and deactivated automatically when Okta state changes.

Import existing Statsig users and groups

You can't push users into groups unless they're assigned to the integration.

  • In Okta, go to the Statsig app's "Import" tab
  • Click "Import Now" to fetch existing Statsig users and groups
  • Process the imported users as needed

Okta Import tab listing Statsig users ready to be brought into Okta

Manage user assignments

  • Use the "Assignments" tab in Okta to add or remove users from Statsig
  • Adding a user assignment in Okta creates the user in Statsig. Removing the assignment deactivates their Statsig account.

Okta Assignments tab showing Statsig app user assignment controls

Push groups to Statsig

  1. In Okta, go to the Statsig Integration's "Push Groups" tab

    Push Groups tab in Okta Statsig integration

  2. Click the settings button and disable "Rename Groups"

    Push group settings dialog with Rename Groups toggle

  3. Click "Push Groups" and select the method for finding groups in Okta.

    Okta modal prompting to find groups by name for push

  4. Type in and select the Okta group to push to a Statsig Project x Role Group.

  • Find groups under Directory > Groups in the Okta left nav. You will see groups created from Okta and groups created by Statsig.
  • The required groups are those you created in Okta. Filter by setting Group source type to Okta groups. If you have no Okta groups, create one and add members.

    Directory listing of Okta groups filtered to Okta source

  1. Link the Okta group to the Statsig group with the role you want.
  • Change Match Result & Push Action to Link Group

    Push group configuration selecting Link group action

  1. Select the Statsig Project x Role Group that the Okta group pushes to.
  • Statsig displays the Project x Role Group with the format Statsig-<Project Name>-<Role Name> on Okta.
  • By default Okta only allows you to map 1 Okta Group to 1 Statsig Group.

    Statsig project role group dropdown showing Statsig-Project-Role format

  1. Then link the Okta group to a Statsig Project x Role Group. On save, the group pushes to Statsig. All future group changes on Okta push to Statsig.

    Summary screen confirming Okta group linked to Statsig project role

Was this helpful?