Setup wizard

The Setup flow walks a new tenant from zero to “ready for membership ops” without an Okta API token.

Steps

1. Directory — Copy the SCIM base URL and generate a bearer token. Configure your IdP’s SCIM client.
2. Org mapping — Map profile attribute keys to hierarchy levels. Live preview shows the path for a sample SCIM User JSON.
3. Targets — Connect at least one of Google, Slack, Jira, or GitHub (full connect UIs on Connections).
4. First reconcile — Enqueue a tenant-wide reconcile so the worker evaluates linked resources.

Where to find it

• Sidebar → Setup
• Overview banner when setup is incomplete (dismissible)

Acceptance criteria (product)

• No Okta event-hook URL or API token as the primary path
• Directory token + one active target is enough to leave the tenant ready for identity push → membership work
• Attribute map has a live preview against sample JSON