Assigning Revenue Accelerator roles and licenses in Okta

Account owners and admins can configure and manage role-based access control in Zoom Revenue Accelerator through System for Cross-domain Identity Management (SCIM) integration with their identity provider. The system supports real-time role mapping and automatic updates when user attributes change in the identity provider. Admins can define role assignment rules that automatically apply when users are provisioned or modified. This automated approach ensures accurate role assignments and reduces security risks associated with manual role management.

This feature enhances the existing single sign-on (SSO) integration with Okta by enabling organizations to efficiently assign both standard and custom roles to users directly through their identity provider. This update reduces manual user management, streamlines onboarding, and ensures improved security and compliance. Admins can assign both standard and custom Zoom Revenue Accelerator (ZRA) roles through Okta’s role provisioning interface. Changes made to roles in Okta are synchronized to ZRA in near-real-time, ensuring up-to-date access controls.

Note: It is recommended that when using ZRA role assignment via your IdP, you do not manually change ZRA roles directly in Zoom to maintain consistency.

This also includes comprehensive logging of all provisioning actions, including role assignments, changes, and de-provisioning. Okta admins can assign roles, ensure real-time synchronization, and maintain organizational structure. ZRA admins can access detailed audit trails for compliance and receive failure notifications for troubleshooting.

Learn more about assigning Revenue Accelerator roles and licenses in Entra ID and setting up advanced SAML mapping on the Zoom web portal.

Requirements for assigning Revenue Accelerator roles and licenses in Okta

Note: Learn more about the SAML/SCIM requirements.

Limitations for assigning Revenue Accelerator roles and licenses in Okta

Assigning Revenue Accelerator roles and licenses in Okta has the following limitations:

Table of Contents

How to add Revenue Accelerator role and license attributes

You can add Revenue Accelerator role and license attributes in the following ways.

Okta user object

Add a role attribute at the Okta user level

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Directory then click Profile Editor.
  3. Click the Users tab.
  4. In the Users box, under Filters, click All.
  5. To the right of Okta, click the User profile.
    You will be directed to the Okta user profile.
  6. Under Attributes, click + Add Attribute.
    A pop-up window will appear.
  7. In the window, complete the following information:
    • Data type: Click the dropdown menu and select the data type as string.
    • Display name: Enter zoomRevenueAcceleratorRole as the display name.
    • Variable name: Enter zoomRevenueAcceleratorRole as the variable name.
    • (Optional) Description: Enter a brief description.
    • (Optional) Enum: Select or de-select the Define enumerated list of values checkbox.
    • (Optional) Restriction: Select or de-select the Value must be unique for each user checkbox.
    • (Optional) Attribute length: Click the dropdown menu and select the attribute length, then enter the minimum and maximum values.
    • (Optional) Attribute required: Select or de-select the Yes checkbox.
  8. Click Save.
    If you want to add another attribute, click Save and Add Another.

Add a license attribute at the Okta user level

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Directory then click Profile Editor.
  3. Click the Users tab.
  4. In the Users box, under Filters, click All.
  5. To the right of Okta, click the User profile.
    You will be directed to the Okta user profile.
  6. Under Attributes, click + Add Attribute.
    A pop-up window will appear.
  7. In the window, complete the following information:
    • Data type: Click the dropdown menu and select the data type as boolean.
    • Display name: Enter zoomRevenueAccelerator as the display name.
    • Variable name: Enter zoomRevenueAccelerator as the variable name.
    • (Optional) Description: Enter a brief description.
    • (Optional) Restriction: Select or de-select the Value must be unique for each user checkbox.
    • (Optional) Attribute required: Select or de-select the Yes checkbox.
  8. Click Save.
    If you want to add another attribute, click Save and Add Another.
Zoom Application Profile

Add a role attribute to the Zoom User Application Profile

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Applications then click Applications.
  3. Under STATUS, click ACTIVE.
  4. Click the Zoom application.
    Note: The application name is defined by the Okta admin. This application will not always be called Zoom, as the customer will define the name when they create the application. Most of the time it will be named Zoom, but note that this could appear differently.
  5. Click the Provisioning tab.
  6. Under Zoom Attribute Mappings, click Go to Profile Editor.
    You will be directed to the profile editor page to edit the Zoom User profile.
  7. Under Attributes, click + Add Attribute.
    A pop-up window will appear.
  8. In the window, complete the following information:
    Note: It is important to have the correct external name and external namespace.
    • Data type: Click the dropdown menu and select the data type as string.
    • Display name: Enter zoomRevenueAcceleratorRole as the display name.
    • Variable name: Enter zoomRevenueAcceleratorRole as the variable name.
    • External name: Enter zoomRevenueAcceleratorRole as the external name.
    • External namespace: Enter the following external namespace: urn:ietf:params:scim:schemas:extension:zoom:1.0:User:zoomRevenueAcceleratorRole
    • (Optional) Description: Enter a brief description.
    • (Optional) Enum: Select or de-select the Define enumerated list of values checkbox.
    • (Optional) Restriction: Select or de-select the Value must be unique for each user checkbox.
    • (Optional) Attribute length: Click the dropdown menu and select the attribute length, then enter the minimum and maximum values.
    • (Optional) Attribute required: Select or de-select the Yes checkbox.
    • Attribute type: Select the Personal option.
      Note: Most attributes are personal. Only select Group if you want to set the value of this attribute at a group level.
  9. Click Save.
    If you want to add another attribute, click Save and Add Another.

ZRA role attributes will be set up on the Zoom User Application Profile.

Add a license attribute to Zoom User Application Profile

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Applications then click Applications.
  3. Under STATUS, click ACTIVE.
  4. Click the Zoom application.
  5. Click the Provisioning tab.
  6. Under Zoom Attribute Mappings, click Go to Profile Editor.
    You will be directed to the profile editor page to edit the Zoom User profile.
  7. Under Attributes, click + Add Attribute.
    A pop-up window will appear.
  8. In the window, complete the following information:
    Note: It is important to have the correct external name and external namespace.
    • Data type: Click the dropdown menu and select the data type as boolean.
    • Display name: Enter zoomRevenueAccelerator as the display name.
    • Variable name: Enter zoomRevenueAccelerator as the variable name.
    • External name: Enter zoomRevenueAccelerator as the external name.
    • External namespace: Enter the following external namespace: urn:ietf:params:scim:schemas:extension:zoom:1.0:User:zoomRevenueAccelerator
    • (Optional) Description: Enter a brief description.
    • (Optional) Attribute required: Select or de-select the Yes checkbox.
    • Attribute type: Select the Personal option.
      Note: Most attributes are personal. Only select Group if you want to set the value of this attribute at a group level.
  9. Click Save.
    If you want to add another attribute, click Save and Add Another.
Groups

Add a role attribute at the group level

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Directory then click Profile Editor.
  3. Click the Users tab.
  4. In the Users box, under Filters, click All.
  5. Click the Zoom User profile.
    You will be directed to the profile.
  6. Under Attributes, click + Add Attribute.
    A pop-up window will appear.
  7. In the window, complete the following information:
    • Data type: Click the dropdown menu and select the data type as string.
    • Display name: Enter zoomRevenueAcceleratorRole as the display name.
    • Variable name: Enter zoomRevenueAcceleratorRole as the variable name.
    • External name: Enter zoomRevenueAcceleratorRole as the external name.
    • External namespace: Enter the following external namespace: urn:ietf:params:scim:schemas:extension:zoom:1.0:User:zoomRevenueAcceleratorRole
    • (Optional) Description: Enter a brief description.
    • (Optional) Enum: Select or de-select the Define enumerated list of values checkbox.
    • (Optional) Attribute length: Click the dropdown menu and select the attribute length, then enter the minimum and maximum values.
    • (Optional) Attribute required: Select or de-select the Yes checkbox.
    • Attribute type: Select the Group option.
  8. Click Save.
    If you want to add another attribute, click Save and Add Another.

Add a license attribute at the group level

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Directory then click Profile Editor.
  3. Click the Users tab.
  4. In the Users box, under Filters, click All.
  5. Click the Zoom User profile.
    You will be directed to the profile.
  6. Under Attributes, click + Add Attribute.
    A pop-up window will appear.
  7. In the window, complete the following information:
    Note: It is important to have the correct external name and external namespace.
    • Data type: Click the dropdown menu and select the data type as boolean.
    • Display name: Enter zoomRevenueAccelerator as the display name.
    • Variable name: Enter zoomRevenueAccelerator as the variable name.
    • External name: Enter zoomRevenueAccelerator as the external name.
    • External namespace: Enter the following external namespace: urn:ietf:params:scim:schemas:extension:zoom:1.0:User:zoomRevenueAccelerator
    • (Optional) Description: Enter a brief description.
    • (Optional) Attribute required: Select or de-select the Yes checkbox.
    • Attribute type: Select the Group option.
  8. Click Save.
    If you want to add another attribute, click Save and Add Another.

How to enable provisioning settings

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Applications then click Applications.
  3. Under STATUS, click ACTIVE.
  4. Click the Zoom application.
    Note: The application name is defined by the Okta admin. This application will not always be called Zoom, as the customer will define the name when they create the application. Most of the time it will be named Zoom, but note that this could appear differently.
  5. Click the Provisioning tab.
  6. Under Provisioning to App, click Edit, then enable the following checkboxes:
  7. Click Save.

How to map the role and license attributes in the Zoom User Application Profile

Map the role attribute

  1. Add a role and license attributes to the Zoom User Application Profile.
  2. Ensure that provisioning settings are enabled.
  3. In the Okta console's left navigation menu, click Applications then click Applications.
  4. Under STATUS, click ACTIVE.
  5. Click the Zoom application.
    Note: The application name is defined by the Okta admin. This application will not always be called Zoom, as the customer will define the name when they create the application. Most of the time it will be named Zoom, but note that this could appear differently.
  6. Click the Provisioning tab.
  7. Under Zoom Attribute Mappings, to the right of the zoomRevenueAcceleratorRole attribute, click the edit icon. If this is not showing, click Show Unmapped Attributes.
    A pop-up window will appear.
  8. In the window, click the Attribute value dropdown and select Map from Okta Profile.
  9. Click the login | string dropdown menu and select zoomRevenueAcceleratorRole | string to map to the attribute.
  10. Select Create and update.
  11. Click Save.

Map the license attribute

  1. Add a role and license attributes to the Zoom User Application Profile.
  2. Ensure that provisioning settings are enabled.
  3. In the Okta console's left navigation menu, click Applications then click Applications.
  4. Under STATUS, click ACTIVE.
  5. Click the Zoom application.
    Note: The application name is defined by the Okta admin. This application will not always be called Zoom, as the customer will define the name when they create the application. Most of the time it will be named Zoom, but note that this could appear differently.
  6. Click the Provisioning tab.
  7. Under Zoom Attribute Mappings, to the right of the zoomRevenueAccelerator attribute, click the edit icon. If this is not showing, click Show Unmapped Attributes.
    A pop-up window will appear.
  8. In the window, click the Attribute value dropdown and select Map from Okta Profile.
  9. Click the login | string dropdown menu and select zoomRevenueAccelerator | boolean to map to the attribute.
  10. Select Create and update.
  11. Click Save.

How to assign the custom ZRA role with Zoom user attributes

  1. Ensure that provisioning settings are enabled.
  2. In the Okta console's left navigation menu, click Directory then click People.
  3. Click the name of the person you want to manage.
  4. Click the Profile tab.
  5. In the top-right corner, click Edit.
  6. To the right of zoomRevenueAcceleratorRole, copy the name of the standard or custom Revenue Accelerator role that was added to role management from the Zoom web portal.
    Note: In the future, you can change the role to another custom role, and the user will automatically be mapped to the new role in the Zoom web portal.
  7. To the right of zoomRevenueAccelerator, click the dropdown menu and select true.
  8. Click Save.

After completing these steps, return to the Zoom web portal to view the standard or custom Revenue Accelerator role added in role management. The configured user will automatically appear in that standard or custom role as a Role Member.

How to assign the ZRA standard or custom role via groups

Add a group

  1. Add a role and license attributes at the group level.
  2. Ensure that provisioning settings are enabled.
  3. In the Okta console's left navigation menu, click Directory then click Groups.
  4. Click the All tab.
  5. In the top-right corner, click Add group.
    A pop-up window will appear.
  6. In the window, enter the following information:
  7. Click Save.
  8. Repeat Steps 4-6 to add more groups.

Assign an application to a group

  1. Access the group you created.
  2. Click the Applications tab.
  3. In the top-right corner of the page, click Assign application.
    A pop-up window will appear.
  4. In the window, to the right of the Zoom application, click Assign.
    Note: The application name is defined by the Okta admin. This application will not always be called Zoom, as the customer will define the name when they create the application. Most of the time it will be named Zoom, but note that this could appear differently.
  5. In the window, configure the following information:
  6. Click Save and Go Back.
  7. Click Done.

After adding the Zoom application to a group, it will appear on the group's Applications tab.

Add people to a group

  1. Access the group you created.
  2. Click the People tab.
  3. In the top-right corner, click Assign People.
  4. At the top of the page, search for users by first name, primary email address, or username.
  5. To the right of the users you want to add, click the add button .
    The users will be assigned to the group.
  6. Click Done.
    The users will appear in the group's People tab.

After adding users to a group, return to the Zoom web portal to view the standard or custom Revenue Accelerator role added in role management. The added group users will automatically appear in the custom role in the Role Member tab.

Notes:

Prioritize groups in the Okta application

Groups are prioritized by numerical ranking in Okta. If you add a user to multiple groups that are mapped to a standard or custom Revenue Accelerator roles in role management, the prioritized group (highest ranking) will determine which custom role the user is added to on the Zoom web portal. You can change the order of the groups to place users in the group's mapped custom ZRA roles that you want.

  1. Sign in to the Okta console.
  2. In the Okta console's left navigation menu, click Applications then click Applications.
  3. Under STATUS, click ACTIVE.
  4. Click the Zoom application.
    Note: The application name is defined by the Okta admin. This application will not always be called Zoom, as the customer will define the name when they create the application. Most of the time it will be named Zoom, but note that this could appear differently.
  5. Click the Assignments tab.
  6. Under Filters, click Groups.
  7. Drag and drop the groups in the order that you want.
    The group users will appear in the group's mapped standard or custom Revenue Accelerator roles in role management as role members, according to the prioritized group placement in Okta.