IdP Group-based Access Governance Policies ✨

Using Access Governance policies, you can now monitor and control app access using IdP group membership. Organizations can enforce governance policies on non-integrated apps based on data provided solely through an Identity Provider like Okta or Google Workspace.

• Non-integrated app support: Create governance policies for apps without a direct integration using data provided by your IdP.
• Flexible governance methods: For integrated apps, choose between Direct Integration (role-based) or Via IdP Group (membership-based) when configuring a policy.
• IdP-driven rules: Select an IdP group instead of app roles when governing via identity provider.

Note: grace periods and automatic remediation are not yet supported for IdP-managed policies and will be introduced in a future release. This capability is automatically available to all organizations with Access Governance enabled in Labs.