Skip to content

Commit

Permalink
Merge pull request #4186 from newrelic/Fix-Okta-doc-on-starting-as-fu…
Browse files Browse the repository at this point in the history
…ll-users

fix(okta): make more clear about managing user type
  • Loading branch information
zuluecho9 committed Oct 5, 2021
2 parents cc951c6 + 300bf9b commit a12c5da
Showing 1 changed file with 2 additions and 4 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -82,17 +82,15 @@ When you've added one or more groups, you should be able to see the users you've

## Step 5. Manage user type [#downgrade]

Once provisioned, your New Relic users start out as [full users](/docs/accounts/accounts-billing/new-relic-one-user-management/new-relic-one-user-model-understand-user-structure#user-type). If your organization is on [New Relic One pricing](/docs/accounts/accounts-billing/new-relic-one-pricing-billing/new-relic-one-pricing-billing), these users are billable.

To convert users to free [basic users](/docs/accounts/accounts-billing/new-relic-one-user-management/new-relic-one-user-model-understand-user-structure#user-type), you have two choices:
If your organization is on [New Relic One pricing](/docs/accounts/accounts-billing/new-relic-one-pricing-billing/new-relic-one-pricing-billing), the count of your [full users](/docs/accounts/accounts-billing/new-relic-one-user-management/new-relic-one-user-model-understand-user-structure#user-type) is a billing factor. To change some of your users to free [basic users](/docs/accounts/accounts-billing/new-relic-one-user-management/new-relic-one-user-model-understand-user-structure#user-type), you have two choices:

* Manage user type from New Relic using the [User management UI](/docs/accounts/accounts-billing/new-relic-one-user-management/add-manage-users-groups-roles#edit-user-type), OR
* Manage user type from Okta (described below).

To manage your users' user type from Okta:

1. Go to the New Relic [authentication domain UI](/docs/accounts/accounts-billing/new-relic-one-user-management/authentication-domains-saml-sso-scim-more/#manage-user-type-scim) and click **Enable Manage user type with SCIM**. Note that when this is enabled, you can’t manage user type from the New Relic UI and can only manage it from Okta.
2. Go into your Okta instance. The rest of these instructions are done in Okta.
2. Go into your Okta instance. The rest of these instructions are done from Okta.
3. Next, you'll configure Okta to be able to send a new attribute `nrUserType`. Steps:
* Go to the **Profile editor**. In the **Attributes** section, click **Add attribute**.
* Set your settings to match the screenshot below (except for the variable name, which is created automatically). The only two fields that must match exactly are **External name** and **External namespace**. The value for **External namespace** must be `urn:ietf:params:scim:schemas:extension:newrelic:2.0:User`
Expand Down

0 comments on commit a12c5da

Please sign in to comment.