Map Okta attributes or group membership to Cloudflare roles

Cloudflare Enterprise supports SSO through Okta, but it appears this can only provide identity (authn), not role (authz).

Is this possible, or planned?

Hi there, in this case, it would be the best option to talk to our Enterprise Sales Team and discuss the options with them as they can give you more detailed insights and tailor the products to your needs.

Thanks @TKlein . I did check with our Account Executive but he didn’t seem to know. I’ll try opening a support ticket.

Not available today. SCIM is on the long term roadmap.

Glad to hear SCIM is already on the roadmap.

A smaller step on the way to SCIM might look like how ArgoCD does role mappings, where an SSO group can map to an ArgoCD role: