{
  "manifestVersion": 1,
  "process": {
    "slug": "sso-access-mgmt",
    "title": "SSO & access mgmt",
    "phase": "compliance",
    "description": "Set up Okta/Google SSO across all company tools with role-based access, MFA, and provisioning."
  },
  "manifestUrl": "https://ultrametric.ai/productarena/processes/sso-access-mgmt/manifest.json",
  "steps": [
    {
      "id": "n1",
      "title": "Set up Okta tenant",
      "kind": "computer-use",
      "route": "form",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [
        {
          "vendor": "okta",
          "name": "Okta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "high",
      "estimatedMinutes": 30,
      "async": false
    },
    {
      "id": "n2",
      "title": "Define role-based groups",
      "kind": "api",
      "route": "agent",
      "toolCall": null,
      "calls": [
        {
          "method": "POST /api/v1/groups",
          "type": "rest",
          "description": "Create access groups"
        }
      ],
      "vendorOptions": [
        {
          "vendor": "okta",
          "name": "Okta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 20,
      "async": false
    },
    {
      "id": "n3",
      "title": "Configure SSO for each app",
      "kind": "api",
      "route": "agent",
      "toolCall": null,
      "calls": [
        {
          "method": "POST /api/v1/apps",
          "type": "rest",
          "description": "Add SSO applications"
        }
      ],
      "vendorOptions": [
        {
          "vendor": "okta",
          "name": "Okta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "high",
      "estimatedMinutes": 120,
      "async": false
    },
    {
      "id": "n4",
      "title": "Enable MFA policies",
      "kind": "api",
      "route": "agent",
      "toolCall": null,
      "calls": [
        {
          "method": "POST /api/v1/policies",
          "type": "rest",
          "description": "Create MFA policy"
        }
      ],
      "vendorOptions": [
        {
          "vendor": "okta",
          "name": "Okta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "high",
      "estimatedMinutes": 15,
      "async": false
    },
    {
      "id": "n5",
      "title": "Provision existing users",
      "kind": "api",
      "route": "agent",
      "toolCall": null,
      "calls": [
        {
          "method": "POST /api/v1/users",
          "type": "rest",
          "description": "Create user profiles"
        }
      ],
      "vendorOptions": [
        {
          "vendor": "okta",
          "name": "Okta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "high",
      "estimatedMinutes": 30,
      "async": false
    },
    {
      "id": "n6",
      "title": "Test SSO across all apps",
      "kind": "human",
      "route": "person",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 120,
      "async": false
    },
    {
      "id": "n7",
      "title": "Roll out to team",
      "kind": "human",
      "route": "person",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 480,
      "async": true
    }
  ],
  "provenance": {
    "source": "productarena",
    "url": "https://ultrametric.ai/productarena",
    "generatedFrom": "data/processes.json + data/process-chains.json (the ProductArena founder-process corpus), resolved against live arena leaderboards at build time. Regenerate by refetching this manifest URL — it always reflects the currently deployed data, not a pinned data commit.",
    "license": "ProductArena Data License (DATA-LICENSE in github.com/ultrametricai/productarena): querying and quoting with attribution to \"ProductArena by Ultrametric Inc\" is fine; bulk redistribution or use to build competing datasets requires written permission."
  }
}