6.5 Mapping Authorizations

After the authorizations load, map the SaaS application authorizations to the identity source roles (groups).

To map authorizations:

  1. In the right pane of the Policy Mapping page, click the down arrow, then select the desired SaaS connector.

  2. In the Role Name column on the left, select the role (group) from the identity source you want to map to an authorization from the selected SaaS connector.

  3. In the right pane, drag and drop the desired authorization from the SaaS connector to the left mapping pane.

    or

    In the left pane, drag and drop the desired group from the identity source to the right mapping pane.

  4. (Optional) Click the Require Approvals icon Require Approvals icon if an approval is required to grant access.

    NetIQ recommends a maximum of 2,000 simultaneous approvals. For more information about approvals, see Section 7.0, Approving Requests.

  5. Click OK to map the SaaS authorization to the identity source group.

The mapping grants any users of the existing identity source roles to the SaaS application authorization. When you add new users to the mapped role (group), the users in the role (group) automatically receive the authorization for the SaaS application as long as they have a user account authorization. Or the user is prompted to verify their account information the first time they log in.