What’s ConductorOne’s IP address?

ConductorOne has these associated IP addresses:

35.85.212.195

35.82.205.32

What happens if the application owner, entitlement owner, or group members change after tasks are assigned?

If an entitlement owner, application owner, or group member is added or removed after the task is created but while the task is still open, ConductorOne does not recreate the task, and does not assign it to any new owners or members. However, you can restart the open task to show all the current owners or members as reviewers, and any current owner or member will then be able to complete the task.

If an access review campaign due date has passed, can a reviewer still complete their assigned tasks?

Yes, you can complete tasks until the campaign is ended. Only a campaign admin can end a campaign, the campaign does not auto-close on the campaign end date.

• For reviewers: If a task is no longer available under Assignments, the campaign has ended and no action can be taken. The task can be viewed and comments added under Completed tasks.

• For campaign administrators: When it’s time to end a campaign, you will chose what action to take for any uncompleted tasks.

Can a reviewer reopen a task they’ve completed?

Once a review task is completed, a campaign manager or Super Admin can restart the task if needed.

To restart a task:

1. In the navigation panel, click Campaigns.

2. Click the name of the campaign, then click Tasks.

3. Locate the task that should be reopened and click View.

4. In the Actions menu, select Restart.

Once a task is restarted, the task will be ready for review again in the reviewer’s Assignments.

Can we delete or remove a task from an in-progress campaign?

Yes, a campaign manager or Super Admin can remove a task from a campaign.

1. In the navigation panel, click Campaigns.

2. Click the name of the campaign, then click Tasks.

3. Locate the task that should be removed and click View.

4. In the Actions menu, select Delete.

5. Optional. Leave a comment indicating why this task was removed from the campaign.

I see there is more than one approval step. If I deny the request does it still go to other reviewers?

No, the request will stop at you, and the task will be closed as access denied.

If there is no entitlement owner for a review and we don’t have a fallback user defined in the policy, what happens to the review?

The review remains unassigned if no fallback user is assigned in the policy. The campaign admin can go into the campaign, locate the task, and re-assign it. The review will not error out.

If we use Okta as our directory, how often will changes made in Okta sync to ConductorOne?

Changes made in Okta will typically sync within 1-2 hours. The range in time depends on the size of your Okta tenant.

How do I make the ConductorOne app visible on the Okta user dashboard?

To display the ConductorOne app on the Okta end user dashboard:

1. Log into the Okta portal as an Admin.

2. Navigate to Okta admin > Applications > ConductorOne.

3. Click the General tab. Scroll to General Settings and click Edit.

4. In the Grant type area, check Implicit (hybrid). Leave Allow ID Token with implicit grant type checked.

5. Set Login initiated by to Either Okta or App.

6. In the Application visibility area, check Display application icon to users.

7. In the Initiate login URI field, enter https://<YOUR TENANT>.conductor.one/login?sso_operation=initiate_login

   • Validate this URL by navigating to it directly. If you are not logged in to ConductorOne, a valid URL will redirect you to the single sign-on screen.

8. Click Save.

Alternatively, you can create a Bookmark App integration in Okta by following the instructions in the Okta documentation: Create a Bookmark App integration.

Enter https://<YOUR TENANT>.conductor.one/login?sso_operation=initiate_login as the URL for the sign-in page for ConductorOne.