Hi @Salesforce Identity : We have active directory where all org's user credentials are stored. We want to do auto provisioning to SF application as soon as a new user is created in AD. We are thinking of using Identity connect for this purpose.
However, we already have OKTA implemented in our company which basically provides SSO to all the cloud and non cloud applications. If we implement Idenitty connect, do we need to use Identity connect for Salesforce as IdP (Idenity provider)
or
we can keep using OKTA as IDp and use Identity connect for syncing of users between AD and Salesforce.
Thanks in advance.
SAML and OpenID Connect are equally secure. SAML is more on the legacy side of things (it's been around since 2001) whereas OpenID Connect (and the underlying OAuth) is newer and part of a thriving community. If you can, choose OpenID Connect.
Often times, you'll choose one vs the other because the app you want to integrate only supports one. Salesforce provides both SAML and OpenID Connect support both as an IdP and as an SP so you can mix and match.
