# Connect Namely to Okta > Keep employee records, access permissions, and identity lifecycles in sync across your HR and IT systems. **Canonical page:** https://tray.ai/connectors/namely-okta-integrations/ **Okta connector:** https://tray.ai/connectors/okta-integrations/ **Okta documentation:** https://tray.ai/documentation/connectors/service/okta ## Overview Namely is your system of record for HR data. Okta is the gateway for secure application access. When employee information lives in silos across these two platforms, IT and HR teams burn hours on manual provisioning, deprovisioning, and reconciliation tasks. Integrating Namely with Okta through tray.ai means every hire, termination, role change, or department transfer in your HRIS is immediately reflected in your identity and access management system. The case for connecting Namely and Okta comes down to security, efficiency, and compliance. Every day a new hire waits for their accounts is a day of lost productivity. Every day a terminated employee still has system access is a security liability. Automating the flow of employee data from Namely into Okta eliminates the lag between HR actions and IT responses, enforces least-privilege access based on role and department, and keeps a clean, auditable trail of identity changes. HR teams focus on people instead of paperwork, IT teams drop the repetitive ticketing work, and security teams can trust that access rights always match what's in the HR system. ## Use cases ### Automated Employee Onboarding Provisioning When a new employee record is created and activated in Namely, tray.ai triggers Okta to provision the user account, assign the right group memberships based on department and job title, and kick off app assignments. The new hire arrives on day one with every tool already waiting for them. - Eliminates manual IT ticketing for new hire account creation - Ensures day-one readiness with role-appropriate app access - Cuts onboarding time from days to minutes ### Instant Access Revocation on Employee Termination When an employee's status in Namely changes to terminated or inactive, tray.ai immediately triggers Okta to deactivate the user account, revoke all active sessions, and remove group memberships. This closes the security window that opens when offboarding is handled manually. - Eliminates orphaned accounts after termination - Ensures instant, complete access revocation across all Okta-managed apps - Creates an auditable record of deprovisioning tied to HR events ### Role and Department Change Access Updates When an employee is promoted, transferred, or changes departments in Namely, tray.ai syncs those changes to Okta — updating group memberships, removing old role-based access, and assigning new application entitlements. Access rights always reflect the employee's current position without manual IT intervention. - Automatically adjusts app access to match new job responsibilities - Prevents access accumulation from role changes over time - Keeps Okta group structures aligned with Namely org hierarchy ### Manager Hierarchy and Delegation Sync Namely's manager relationships and reporting structure data can be continuously synchronized into Okta to support approval workflows, delegation policies, and manager-based access controls. When reporting lines change in Namely, Okta picks up those changes for governance and workflow purposes. - Keeps Okta manager attributes current for approval and delegation flows - Supports zero-touch governance policies based on reporting structure - Reduces errors in access request routing from stale manager data ### Employee Profile Attribute Synchronization Core HR profile data — job title, cost center, location, employee ID — stored in Namely is continuously pushed to Okta user profile attributes. That identity data powers downstream policy enforcement, reporting, and dynamic group rules within Okta. - Enriches Okta user profiles with authoritative HR data - Enables dynamic Okta group rules driven by Namely attributes - Gives you a single source of truth for identity attributes across the organization ### Leave of Absence and Reactivation Lifecycle Management When Namely records an employee going on extended leave, tray.ai signals Okta to suspend the account without fully deprovisioning it, preserving group memberships and settings. When the employee returns and is reactivated in Namely, Okta restores full access automatically. - Handles temporary suspension without destroying provisioning configurations - Automates reactivation so returning employees have immediate access - Reduces the risk of reactivating accounts with incorrect permissions ### Compliance Reporting and Access Audit Reconciliation tray.ai can periodically pull active employee records from Namely and cross-reference them with active user accounts in Okta to identify discrepancies — active Okta accounts for terminated employees, missing accounts for active staff, and similar gaps. These reconciliation reports support SOC 2, HIPAA, and ISO compliance audits. - Surfaces identity and HR data mismatches before audits do - Supports compliance frameworks requiring access control evidence - Reduces manual effort in generating access review documentation ## Templates ### New Hire in Namely → Provision User in Okta Monitors Namely for newly activated employee records and creates a corresponding Okta user profile, assigns the appropriate groups based on department and job title, and triggers application assignments so the employee is fully provisioned before their start date. Connectors used: Namely, Okta ### Employee Termination in Namely → Deactivate Okta Account Detects termination status changes in Namely and immediately deactivates the corresponding Okta account, terminates all active sessions, and removes the user from all assigned groups and applications for complete, instant access revocation. Connectors used: Namely, Okta ### Namely Profile Update → Sync Okta User Attributes Listens for profile field changes in Namely — job title, department, location, cost center — and pushes those changes to the corresponding Okta user profile attributes in real time, keeping identity data consistent across both systems. Connectors used: Namely, Okta ### Namely Leave of Absence → Suspend and Restore Okta Account Suspends an Okta user account when a leave of absence is recorded in Namely, then restores full access when the employee's active status is reinstated — no IT involvement needed to manage provisioning configurations during the leave period. Connectors used: Namely, Okta ### Scheduled Namely–Okta Access Reconciliation Report Runs on a schedule to compare active employee records in Namely against active user accounts in Okta, flags discrepancies like orphaned accounts or missing users, and delivers a reconciliation report to IT and compliance stakeholders. Connectors used: Namely, Okta ### Namely Department Transfer → Update Okta Group Memberships When an employee transfers to a new department in Namely, this template removes them from their previous department's Okta groups and adds them to the right groups for their new department, so access reflects where they actually sit in the org. Connectors used: Namely, Okta ## Challenges Tray.ai solves ### Latency Between HR Events and IT Actions Creates Security Gaps When Namely HR events — terminations, role changes — require a manual handoff to IT for Okta updates, there's an inevitable delay. Terminated employees keep active accounts. Transferred employees hold onto access they shouldn't have. That lag is a well-documented source of security incidents and audit findings. **How Tray.ai helps:** tray.ai monitors Namely for status and profile changes in real time and triggers Okta actions instantly, bringing the gap between HR decisions and identity enforcement close to zero without any manual intervention. ### Mapping Namely's HR Data Model to Okta's Identity Schema Namely stores workforce data in HR-centric structures — departments, pay groups, job levels, employment types — that don't map directly to Okta's user profile attributes and group structures. Translating between these two schemas manually is error-prone and slow to maintain. **How Tray.ai helps:** tray.ai's visual data transformation tools let teams build flexible, maintainable mappings between Namely's HR fields and Okta's profile schema, including conditional logic for edge cases like contractors, part-time employees, or multi-department roles. ### Handling Edge Cases in the Employee Lifecycle Standard onboarding and offboarding flows are straightforward. The real complexity is in the edge cases: rehires with existing Okta accounts, employees with multiple concurrent positions, international staff with different attribute requirements, workers switching between employee and contractor status. **How Tray.ai helps:** tray.ai's workflow branching and conditional logic lets integration builders define custom handling paths for each edge case, so rehires are reactivated correctly, dual-role employees are provisioned appropriately, and no scenario falls through the cracks. ### Maintaining Sync Accuracy During High-Volume HR Changes During rapid hiring, reorganizations, or mergers, Namely can generate a high volume of simultaneous employee record changes that all need to be reliably processed and reflected in Okta without data loss, duplication, or race conditions. **How Tray.ai helps:** tray.ai's workflow engine handles high-volume event streams reliably, with built-in error handling, retry logic, and execution logging that ensures every Namely change gets processed and synced to Okta even during peak load. ### Auditing and Proving Compliance for Identity Governance SOC 2, HIPAA, and ISO 27001 all require organizations to show that access rights are granted based on role, revoked promptly on termination, and reviewed regularly. Manually gathering evidence from Namely and Okta separately is labor-intensive and produces a fragmented picture. **How Tray.ai helps:** tray.ai logs every integration event — provisioning actions, attribute syncs, group changes, deprovisioning steps — with timestamps and source data, giving you a comprehensive audit trail that directly supports identity governance reviews and compliance reporting across both Namely and Okta. ## Learn more - Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/ - Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/ - Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/ - Book a demo: https://tray.ai/contact/