Enable automatic Team assignment for new CMP users (provisioned via SCIM)
Organizations using SCIM provisioning to automate user management in Optimizely CMP need the ability to automatically assign newly provisioned users to a default Team. Without this, user provisioning is only partially automated and requires ongoing manual administration to ensure new users can access the Tasks and Campaigns they need.
Background
Following our migration to OptiID, management of CMP Teams moved from CMP to the Optimizely Admin Center, where Teams were initially managed within the Groups section.
Newly provisioned users (e.g. Creators and Admins) could be automatically assigned to a Team providing access to all relevant Tasks and Campaigns (as before OptiID).
Optimizely has since improved Team management by introducing a dedicated Teams section in the Admin Center instead of managing Teams through Groups. This has made Team administration significantly easier and is a welcome improvement.
However, with this change, we have lost the ability to automatically assign newly provisioned users to a Team.
Current challenge
As a result, newly provisioned users are not automatically added to the required Team and therefore cannot see the relevant Tasks and Campaigns. An administrator needs to identify and assign each new user manually.
For organizations using SCIM provisioning, this creates a significant gap in an otherwise automated user-management process.
This is not sustainable for larger organizations with a significant or frequently changing user base and undermines one of the key benefits of automated SCIM provisioning.
Feature request
Please enable administrators to define automatic/default Team assignment for newly provisioned CMP users.
We kindly request to enable configuring default Teams to which new users are automatically assigned based on their access group (provisioned from IdP).
Value for CMP customers
This would enable organizations to achieve true end-to-end automated user provisioning, while ensuring that new users have the right CMP access from day one.
It would:
- eliminate repetitive manual Team assignment;
- reduce administrative effort and the risk of missed assignments;
- provide a smoother onboarding experience for new CMP users;
- make SCIM provisioning more effective and scalable for enterprise customers; and
- ensure that automated identity management and CMP access management work together consistently.
Further technical details and the specific behavior observed are being discussed with Optimizely Support under ticket #1919539.
Thank you for looking into this feature request and please feel free to reach out to me for further details as needed.
-
Shaikshavali Mohammed
commented
This is important because it enables automatic access management removing manual provisioning