Okta access hygiene digest
Scheduled read-only Okta access governance digest. It reads a bounded page of users, groups, applications, and System Log events through recued-core.okta, renders compact tables, and optionally sends an in-app nudge when matching System Log events are visible. It never suspends users, changes group membership, mutates application assignments, resets credentials or factors, changes policies, or calls arbitrary Okta APIs.
How it works
Inspect the data fetches, transforms, gates, and output this recipe runs.
Process (25 steps)
users_raw
?
groups_raw
?
apps_raw
?
logs_raw
?
users
default
Apply default
groups
default
Apply default
apps
default
Apply default
events
default
Apply default
user_count
count
Count items in users
group_count
count
Count items in groups
app_count
count
Count items in apps
event_count
count
Count items in events
has_events
compare
Check if event count is greater than 0
notify_enabled
compare
Check if setting notify when events equals true
should_notify
all
Check if all conditions are true
notify
?
skip: step.should_notify not_equal true
user_rows
slice
Take a subset of
group_rows
slice
Take a subset of
app_rows
slice
Take a subset of
event_rows
slice
Take a subset of
user_table
to_table
Format results as a data table
group_table
to_table
Format results as a data table
app_table
to_table
Format results as a data table
event_table
to_table
Format results as a data table
card
to_summary
Format results as a summary card
Settings
Configurable at install. Defaults shown — change them anytime in Recued.
okta
setting
=
since
setting
=
until
setting
=
channels
setting
=
in_app
end hour
setting
=
10
weekdays
setting
=
1,2,3,4,5
row limit
setting
=
20
app filter
setting
=
status eq "ACTIVE"
log filter
setting
=
eventType sw "user.lifecycle"
start hour
setting
=
8
user filter
setting
=
status eq "ACTIVE"
group search
setting
=
notify when events
setting
=
true
Trust & control
What installing this recipe would let it do. Recued grants these permissions at install — review them there before approving.