PAMenabled Okta endpoint not visible in privilege request page

[Manju_v]

Hi Team, 

Have configure Credential, Credentialless usecase for Okta.  Endpoint is not visible under privilege request page >> Okta.
Have taken care of the configuration. Endpoint is pam enabled. Accounts are pamenabled. After we run deltasync job after updating one of the other attibutes. Endpoint is not available in Okta pam request page. 

Endpoint access query is updated in endpoint. In other attributes able to find Custom Property 43 =  PAMDefaultUserAccountAccessControl.

created role mentioned in pamconfig and added users to the role. 

updated apptype key in endpoint properties as per applicationtype table entry

The Okta endpoint pam enabled and Okta accounts are pam enabled. Okta endpoint is not visible on the privilege request page. 

As per documentation, OKTA__APPLICATION_SECURITYSYSTEM  should be created automatically. OKTA_APPLICATION_SECURITYSYTEM FOR Okta is not getting created.  Okta has imported accounts into the Security system and endpoint manually created. 

Any input is appreciated. 

Thanks, 
Manju

[This message has been edited by moderator to merge reply comments]

[NageshK]

@Manju_v Thanks for posting your question. Few things to verify:

1. Have you added users to the usergroup? If yes, was it after you ran the delta sync or before?
2. Is the delta sync job status showing success? And in job details do you see the expected number of endpoints synced?

Thanks

Nagesh K

[Manju_v]

Hi Nagesh, 

Thanks for the inputs, I have created usergroup.  Delta sync job is having error have opened support ticket (Saviynt Ticket INC-2012625). 
Below is the error for your reference. 

Thanks, 
Manju

[sk]

@Manju_v :

• Does the respective security system has password policy associated(Policy Rule Service Account)?
• Do you have Emergency Access ID Request Workflow and Emergency Access ID Access Request Workflow configured on the respective security system?
• Do you have any access query configured for respective endpoint?

[Manju_v]

@NageshK,

For OKTA, remoteapp will be configured by default.  Customer is not using default OKTA URL, they have a specific URL  mysiXXXFe.oktapreview.com.  Is there any changes required on remote app configuration side?

Thanks, 
Manju