# Okta user and dev experience question **URL:** \ **Category:** Ignition\ **Tags:** ignition81\ **Created:** [August 12, 2024, 2:17pm UTC](https://forum.inductiveautomation.com/t/okta-user-and-dev-experience-question/94518 "2024-08-12T14:17:32Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Zach\_Larson](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/zach_larson/32/54388_2.png) [@Zach\_Larson](https://forum.inductiveautomation.com/u/Zach_Larson)\ **Post date:** [August 12, 2024, 2:17pm UTC](https://forum.inductiveautomation.com/t/okta-user-and-dev-experience-question/94518/1 "2024-08-12T14:17:32Z")
1. Would some people express their experience using Okta on Ignition for both user and dev side? I like just pressing a button on my phone instead of remembering passwords. I was looking here: [User Grants | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/security/identity-provider-authentication-strategy/user-grants)] I didn't see how the roles work with Okta or OpenID Connect 1.0. Though I saw some manual configuration of the User Grants overrides on the next tab. I just recently got a script working to set some roles for an AD hybrid. I was wondering if it is possible to script roles when using Okta. 1. Is the experience more seamless and preferred for role assigning and users logging in, and are user roles easy to script modify when using Okta? ---
**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\ **Post date:** [August 12, 2024, 10:35pm UTC](https://forum.inductiveautomation.com/t/okta-user-and-dev-experience-question/94518/2 "2024-08-12T22:35:33Z")
I haven't used Okta with Ignition, but it should be able to pass group membership to Ignition, then you can map those to roles without any scripting.