IAMInitOktaUser
Generates a password and sets the password for an Okta user. Enables the account. Sends an email to the user with the account information. This script is running the `send-mail` command, make sure there is a mail sender integration configured.
python · Okta
Details
| ID | IAMInitOktaUser |
|---|---|
| Language | python |
| From Version | 6.5.0 |
| Docker Image | demisto/py3-tools:1.0.0.11597437 |
| Tags | IAM Utility Okta |
README
Generates a password and sets the password for an Okta user.
Enables the account.
Sends an email to the user with the account information.
This script is running the send-mail command, make sure there is a mail sender integration configured.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | IAM, Utility, Okta |
| Cortex XSOAR Version | 6.5.0 |
Inputs
| Argument Name | Description |
|---|---|
| pwdGenerationScript | The password generator script. |
| username | The Okta username of the user. |
| displayname | The display name of the employee. |
| temporary_password | When true, you’ll need to change the password in the next login. |
| to_email | The email address that the password will be sent to. |
| inc_id | The incident ID. |
| email_subject | The subject of the email sent to IT. |
| email_body | The body of the email sent to IT. |
| ZipProtectWithPassword | The password to protect the zip file that contains the generated password. if not provided, the generated password will be send in the body of the email. |
| min_lcase | Minimum number of lower case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). |
| max_lcase | Maximum number of lower case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). |
| min_ucase | Minimum number of upper case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). |
| max_ucase | Maximum number of upper case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). |
| min_digits | Minimum number of digits to include in password. Used with the GeneratePassword script (leave empty if using another script). |
| max_digits | Maximum number of digits to include in password. Used with the GeneratePassword script (leave empty if using another script). |
| min_symbols | Minimum number of symbols to include in password. Used with the GeneratePassword script (leave empty if using another script). |
| max_symbols | Maximum number of symbols to include in password. Used with the GeneratePassword script (leave empty if using another script). |
Outputs
| Path | Description | Type |
|---|---|---|
| IAM.InitOktaUser.success | True if the Okta user was successfully activated, false otherwise. | Boolean |
| IAM.InitOktaUser.sentMail | True if the mail containing the information about the user activation and its auto-generated password was successfully sent to IT, false otherwise. | Boolean |
| IAM.InitOktaUser.errorDetails | The error details, if exists. | String |
| IAM.InitOktaUser.sendMailError | The error received from send-mail command, if exists. | String |
commonfields: id: IAMInitOktaUser version: -1 name: IAMInitOktaUser script: '' type: python tags: - IAM - Utility - Okta comment: |- Generates a password and sets the password for an Okta user. Enables the account. Sends an email to the user with the account information. This script is running the `send-mail` command, make sure there is a mail sender integration configured. enabled: true args: - name: pwdGenerationScript description: The password generator script. defaultValue: GeneratePassword - name: username required: true description: The Okta username of the user. - name: displayname description: The display name of the employee. - auto: PREDEFINED name: temporary_password description: When set to true, password change will be mandatory on the next login. defaultValue: 'false' predefined: - 'true' - 'false' - name: to_email required: true description: The email address that the password will be sent to. - name: email_subject description: The subject of the email sent to IT. - name: min_lcase description: Minimum number of lower case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "0" - name: max_lcase description: Maximum number of lower case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "10" - name: min_ucase description: Minimum number of upper case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "0" - name: max_ucase description: Maximum number of upper case characters to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "10" - name: min_digits description: Minimum number of digits to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "0" - name: max_digits description: Maximum number of digits to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "10" - name: min_symbols description: Minimum number of symbols to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "0" - name: max_symbols description: Maximum number of symbols to include in password. Used with the GeneratePassword script (leave empty if using another script). defaultValue: "10" - name: ZipProtectWithPassword description: The password to protect the zip file that contains the generated password. if not provided, the generated password will be send in the body of the email. defaultValue: "" - name: email_body description: The body of the email that will be sent to the user. - name: zip_file_name description: Name of the generated zip file (used internally for polling). outputs: - contextPath: IAM.InitOktaUser.success description: True if the Okta user was successfully activated, false otherwise. type: Boolean - contextPath: IAM.InitOktaUser.sentMail description: True if the mail containing the information about the user activation and its auto-generated password was successfully sent to IT, false otherwise. type: Boolean - contextPath: IAM.InitOktaUser.errorDetails description: Error information, if exists. type: String - contextPath: IAM.InitOktaUser.sendMailError description: Error information received from send-mail command, if exists. type: String scripttarget: 0 subtype: python3 dockerimage: demisto/py3-tools:1.0.0.11597437 runas: DBotWeakRole fromversion: 6.5.0 tests: - IAMInitOktaUser - Test polling: true