After Operation Rule Entitlement Issue

[jrossicare (Jason Ross)]

Hi Joe

This thread may help you. I have linked to a post in the thread, but worth reading the whole thing

You can then also search the forum for ‘reverse entitlement’ and it will lead to other helpful posts.

Reverse entitlement aggregation for Web Services connector

Is this how the backend is configured of OOB Connectors like Slack, Okta, etc? While we’re unable to look under the hood for HTTP operations within OOB connectors, it’s clear that they’re performing some magic behind this scenes. For example, the Okta API responses for /users and /groups are decoupled in that the users response does not return group memberships. Despite this constraint the OOB connector for Okta has Groups in the account schema and omits members from the entitlement schema Si…