💼 Business
Okta Group-to-App Assignment Map from Inventory (No Invented MFA Status)
Build an Okta group-to-app assignment map from an inventory only. No invented MFA status, SSO secrets, or user emails beyond the inventory.
0Reviews
Prompt
Act as an Okta identity assignment note-taker who only uses a pasted group and app inventory. You write a group-to-app assignment map the inventory already supports. You do not invent MFA status, SSO client secrets, user emails, or password hashes. This is not a live IdP change and not a security audit opinion. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Group and app inventory I lock (group labels, app labels, assignment stubs): [Inventory] - Okta / org version notes I lock: [Version] - Org label I may quote (or UNKNOWN): [Org] - Required assignment pairs I may quote (or UNKNOWN): [Assignments] - Words I must not use: [Banned] - What I must never invent (MFA status, SSO secrets, user emails, password hashes): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Org, Assignments, Lang. Forbidden: invented MFA status, SSO secrets, user emails, password hashes. Banner: not a live IdP change; not a security audit opinion. 2. Assignment map table: one row per Inventory group or app. Missing stubs write NOT IN INPUTS. 3. Assignment pair set: only pairs in Assignments. Unnamed pairs stay NOT IN INPUTS. 4. Version lock: print Version. Refuse Okta Admin objects newer than Version if Version is named. 5. Refuse list: inventing MFA status, inventing SSO client secrets, inventing user emails, inventing password hashes. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Map from Inventory only. No invented MFA status or secrets. - Honor Version. No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: group quay-ops as pasted app stub Harbor Wiki as pasted assignment stub push as pasted; group river-finance as pasted app stub Ledger SaaS as pasted. MFA status NOT IN INPUTS. User email NONE. Version: Okta Classic Engine Admin 2024 as pasted (do not invent 2026 Identity Engine merge) Org: Harbor Corp Okta as pasted Assignments: quay-ops to Harbor Wiki as pasted; river-finance to Ledger SaaS as pasted. SCIM sync UNKNOWN. Banned: guaranteed secure MFA, MFA invent, secret invent, email invent Never: invent MFA status, invent SSO secrets, invent user emails, invent password hashes Format: ledger + table + pairs + version + refuse + compliance Lang: English
Example Output
1. Ledger. Inventory: group quay-ops app stub Harbor Wiki assignment stub push; group river-finance app stub Ledger SaaS. MFA status NOT IN INPUTS. User email NONE. Version Okta Classic Engine Admin 2024. Org Harbor Corp Okta. Assignments quay-ops to Harbor Wiki; river-finance to Ledger SaaS; SCIM sync UNKNOWN. Lang English. Banner: not a live IdP change; not a security audit opinion. Forbidden: invented MFA status, SSO secrets, user emails, password hashes, guaranteed secure MFA, MFA invent, secret invent, email invent. 2. Assignment map. 1. quay-ops | app Harbor Wiki as pasted | assignment push as pasted | MFA NOT IN INPUTS | email NOT IN INPUTS. 2. river-finance | app Ledger SaaS as pasted | assignment NOT IN INPUTS | MFA NOT IN INPUTS | email NOT IN INPUTS. User email NONE so no email row. SSO secrets not invented. Password hashes not invented. 3. Assignment pair set. quay-ops to Harbor Wiki; river-finance to Ledger SaaS as Assignments. SCIM sync UNKNOWN so write SCIM NOT IN INPUTS. No third pair invented. 4. Version lock. Okta Classic Engine Admin 2024 as pasted. 2026 Identity Engine merge objects not used. Org UUID NOT IN INPUTS. 5. Refuse. MFA invent: refused. Secret invent: refused. Email invent: refused. Password hash invent: refused. Guaranteed secure MFA: refused. 6. Compliance. Banned hits none. Format ledger+table+pairs+version+refuse+compliance. Gaps: assignment mode for river-finance, SCIM decision, MFA factor list if any, app instance IDs, owner group. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.