About this Playbook
App provisioning is one of the most frequent — and repetitive — IT requests.
The App Provisioning playbook enables the AI Agent to handle these automatically, from qualification to action, in full auto-pilot mode.
What It Can Do
With a properly configured playbook, the AI Agent can:
-
Qualify the request — ask for the app name and required permission level.
-
Check eligibility — validate department rules or available licenses.
-
Request approval — automatically notify the manager or app owner if needed.
-
Execute the action — add the user to the right group in Okta, JumpCloud, or directly provision the license.
-
Confirm resolution — notify the employee once access is granted.
If automation fails, the Agent automatically creates a standard request for IT to follow up — ensuring no interruption.
Why It’s Useful
-
Frees IT teams from repetitive provisioning tasks.
-
Gives employees faster access to the tools they need.
-
Ensures governance and approval flows are respected.
Example in Action
Employee: “I need access to Figma.”
AI Agent → “Got it! What level of access do you need — Viewer or Editor?”
Employee: “Editor.”
AI Agent → Validates the request, gets approval from the manager, provisions access via Okta, and confirms completion.
✅ Result: App access requests are processed automatically, with full traceability and zero IT manual work.
How to set it up
Before starting, make sure you’ve reviewed the Playbook configuration fundamentals to understand how to create and customize playbooks in Siit.
If your Okta or JumpCloud integration is connected to Siit, you’ll have access to pre-built templates designed for this use case — look for the playbook named 🔗 Okta – App Provisioning 📲 (among other available templates).
Once you’ve selected this playbook and clicked Use playbook, you can adjust the configuration to match your specific needs.
In this example, we want the AI Agent to:
-
Qualify the app name when the employee submits the request (if not already specified).
-
Add the user to the correct group based on the requested app. (You can define naming conventions for groups to help the Agent identify them in your directory.)
-
Inform the requester once the action has been successfully completed.
-
Create a request automatically if any issue occurs during execution, assigning it to the correct IT service for follow-up.
💡 You can be as detailed as needed in your instructions to ensure the Agent has all the context required to execute actions accurately.
Once the playbook is saved, test it live!
In the example below, the Agent executes each instruction defined in the playbook, based on the employee’s request.
