diff --git a/packages/@okta/vuepress-site/docs/journeys/OCI-prepare-upgrade-oie/index.md b/packages/@okta/vuepress-site/docs/journeys/OCI-prepare-upgrade-oie/index.md new file mode 100644 index 00000000000..8512b4bbe8d --- /dev/null +++ b/packages/@okta/vuepress-site/docs/journeys/OCI-prepare-upgrade-oie/index.md @@ -0,0 +1,8 @@ +--- +title: Prepare to upgrade to Okta Identity Engine +meta: + - name: description + content: Plan, update, test, and validate your setup so that you can confidently complete a smooth production upgrade. +sections: +- main +--- diff --git a/packages/@okta/vuepress-site/docs/journeys/OCI-prepare-upgrade-oie/main/index.md b/packages/@okta/vuepress-site/docs/journeys/OCI-prepare-upgrade-oie/main/index.md new file mode 100644 index 00000000000..4371bdc6d59 --- /dev/null +++ b/packages/@okta/vuepress-site/docs/journeys/OCI-prepare-upgrade-oie/main/index.md @@ -0,0 +1,155 @@ +--- +title: Prepare to upgrade to Okta Identity Engine +meta: + - name: Prepare to upgrade to Okta Identity Engine + content: Plan, update, test, and validate your setup so that you can confidently complete a smooth production upgrade. + date-updated: July 3, 2026 + target persona: Enterprise Developer, IT, Security, Product Owners +--- + +# Prepare to upgrade to Okta Identity Engine + +Get your setup ready so that you can complete the production upgrade with confidence. + +## Introduction + +Your organization is preparing to upgrade from Classic Engine to Identity Engine for enhanced security, policy control, and modern authentication. This journey guides you through understanding feature changes, such as sign-in flows, policies, MFA, APIs, and legacy functionality. Then, you plan and validate your upgrade through a checklist-driven approach. + +As you work through each section, complete the following tasks: + +* Document your current setup. +* Complete action items in the Upgrade Hub. +* Test in a Preview environment. +* Use the results to schedule and execute your production upgrade. + +You can go directly to the Okta Upgrade Hub in the Admin Console to review your open action items and schedule your upgrade. [Learn more about the Identity Engine Upgrade Hub](https://help.okta.com/okta_help.htm?type=oie&id=csh-complete-action-items). + +You can also review the [Identity Engine upgrade FAQ](https://help.okta.com/okta_help.htm?type=oie&id=ext-upgrade-faq) to get answers to common questions before you begin. + +## Learn + +Review how Identity Engine affects your apps, configurations, and user experiences. Examine differences in sign-in flows, policies, MFA, APIs, and deprecated features to identify what may break, require updates, or continue to work as expected. This enables you to plan your changes. + +### Overview videos + +Before you begin, watch these videos to understand the Identity Engine upgrade and how to identify Okta integration points in your org: + + + + +### User experience changes + +* [Identity Engine sign-in flow behavior](https://help.okta.com/okta_help.htm?type=oie&id=sign-in-flows). +* [App intent links in Identity Engine](https://help.okta.com/okta_help.htm?type=oie&id=csh-identity-engine-upgrade-app-intent-link). +* [Sign-in flow changes with federation and SSO](https://help.okta.com/okta_help.htm?type=oie&id=inbound-sign-in-flow) + +### Policy changes + +* [App sign-on policy](https://help.okta.com/okta_help.htm?type=oie&id=app-sign-on-policy-changes). +* [Okta sign-on policies](https://help.okta.com/okta_help.htm?type=oie&id=okta-sign-on-policy-changes). +* [Sign-on policy task differences](https://help.okta.com/okta_help.htm?type=oie&id=compare-app-sign-on-policies). +* [Multifactor authentication (MFA) enrollment policy](https://help.okta.com/okta_help.htm?type=oie&id=mfa-enrollment-policy-changes). + +### Multifactor Authentication (MFA) changes + +* [MFA](https://help.okta.com/okta_help.htm?type=oie&id=csh-identity-engine-upgrade-mfa-enhancements). +* [Okta Verify](https://help.okta.com/okta_help.htm?type=oie&id=ov-with-fp). +* [Email as an optional authenticator](https://help.okta.com/okta_help.htm?type=oie&id=csh-email-optional). +* [Phone authenticator capabilities](https://help.okta.com/okta_help.htm?type=oie&id=phone-auth). +* [Secondary email address setup](https://help.okta.com/okta_help.htm?type=oie&id=secondary-email-user-account). +* [Security Question](https://help.okta.com/okta_help.htm?type=oie&id=security-questions-and-answers). + +### Other product and feature changes + +* [Sign-In Widget](https://help.okta.com/okta_help.htm?type=oie&id=csh-siw-changes). +* [Email templates](https://help.okta.com/okta_help.htm?type=oie&id=email-enhancements). +* [End-User Settings](https://help.okta.com/okta_help.htm?type=oie&id=eus-changes). +* [Global redirect](https://help.okta.com/okta_help.htm?type=oie&id=global-redirect). +* [Password reset feature](https://help.okta.com/okta_help.htm?type=oie&id=password-reset-account-recovery). +* [Registration inline hooks](https://help.okta.com/okta_help.htm?type=oie&id=registration-hooks). +* [Self-service registration process](https://help.okta.com/okta_help.htm?type=oie&id=csh-identity-engine-upgrade-feature-change-ssr). +* [Suspicious activity reporting](https://help.okta.com/okta_help.htm?type=oie&id=suspicious-activity). +* [Sessions](/docs/guides/oie-upgrade-sessions-api/main/). + +### Okta API changes + +* [Okta APIs](/docs/guides/oie-upgrade-api-changes/main/). +* [Authenticator enrollment policy API](/docs/guides/oie-upgrade-mfa-enroll-policy/main/). + +### Legacy features with limited support + +[Custom app login](https://help.okta.com/okta_help.htm?type=oie&id=csh-custom-app-login-change) is available only to Classic Engine orgs that used it before upgrading. + +### Discontinued features + +Some features are end of life and won't work after the upgrade. These are identified in the Upgrade Hub if your org is impacted. + +## Plan + +Prepare your upgrade strategy by identifying integration points and defining your rollout approach: + +### Identify integration points and customizations + +[Identify all of your Okta integration points](/docs/guides/oie-upgrade-identify-integrations/main/) including apps, SDKs, API tokens, and hooks. This helps your team triage what to test, update, replace, or retire before upgrading. + +### Handle unsupported features + +* [Prepare to remove Okta Mobile](https://help.okta.com/okta_help.htm?type=oie&id=identity-engine-upgrade-prepare-om-users-for-upgrade). +* [Update your policies for Office 365 MFA pass claim](https://help.okta.com/okta_help.htm?type=oie&id=o365-pass-claim). +* [Prepare to replace your Device Trust setup](https://help.okta.com/okta_help.htm?type=oie&id=csh-dt-replace-plan). + +### Define your rollout approach + +[Plan](https://help.okta.com/okta_help.htm?type=oie&id=csh-plan-upgrade-rollout) how you want to sequence changes across orgs, roll out to user segments, and replace unsupported or deprecated features. Okta recommends a gradual, iterative approach over a single cutover. + +### Plan your rollback strategy + +* [When you should roll back](https://help.okta.com/okta_help.htm?type=oie&id=identity-engine-upgrade-rollback). +* [Initiate a rollback request](https://help.okta.com/okta_help.htm?type=oie&id=identity-engine-upgrade-rollback-steps). + +## Build + +Update your environment and code, then test everything in your Preview environment: + +### Record your classic setup and ready your test environment + +* [Record your Classic Engine experience](https://help.okta.com/okta_help.htm?type=oie&id=csh-identity-engine-upgrade-self-service-validation-tests). +* [Set up your test environment](https://help.okta.com/okta_help.htm?type=oie&id=csh-set-up-test-environment). + +### Complete Identity Engine Upgrade Hub action items + +Before you can schedule your upgrade from Classic Engine to Identity Engine, [complete all action items listed in the Identity Engine Upgrade Hub](https://help.okta.com/okta_help.htm?type=oie&id=csh-complete-action-items). + +### Update your org settings and environment + +* [Turn off Device Trust before upgrading to Okta Identity Engine](https://help.okta.com/okta_help.htm?type=oie&id=csh-dt-turn-off). +* [Remove support for Integrated Windows Authentication (IWA)](https://help.okta.com/okta_help.htm?type=oie&id=csh-dt-remove-iwa-routing-rules). +* [Rename Duo Security custom IdP](https://help.okta.com/okta_help.htm?type=oie&id=rename-duo-security). + +### Update your Sign-In Widget + +* [Upgrade the Okta Sign-In Widget version](/docs/guides/oie-upgrade-sign-in-widget/main/). +* [Deprecated JavaScript methods in the widget](/docs/guides/oie-upgrade-sign-in-widget-deprecated-methods/main/). + +### Update your custom code + +* [Update your event hooks for Identity Engine](/docs/guides/oie-upgrade-event-hooks/main/). +* [Update your inline hooks for Identity Engine](/docs/guides/oie-upgrade-registration-inline-hook/main/). +* [Upgrade the Terraform provider](https://help.okta.com/okta_help.htm?type=oie&id=identity-engine-upgrade-prepare-terraform). + +### Test your changes in a test environment + +* [Test user flows, custom code, and third-party tools](https://help.okta.com/okta_help.htm?type=oie&id=ext-test-upgrade). +* [Run through your post upgrade checklist](https://help.okta.com/okta_help.htm?type=oie&id=identity-engine-upgrade-post-upgrade-checklist). +* [Test your widget's existing customizations in a test environment](/docs/guides/oie-upgrade-test-widget-custom/main/). + +### Validate readiness and schedule your upgrade + +* Confirm that all required changes are complete and your testing validates readiness. +* Schedule and execute your production upgrade. + +## Related topics + +* [Find troubleshooting docs at the Okta Knowledge base center](https://support.okta.com/help/s/knowledge?selectedTopics&sortValue=Most%20Popular&searchTerm). +* [Check out the video resources on the Okta Support Center's Identity Engine upgrade page](https://support.okta.com/help/s/product-hub/oie/upgrading-to-okta-identity-engine?language=en_US). +* [Get an overview of the Identity Engine upgrade process](/docs/guides/oie-upgrade-overview/main/). diff --git a/packages/@okta/vuepress-site/docs/journeys/index.md b/packages/@okta/vuepress-site/docs/journeys/index.md index 7200105f6f3..c71be545458 100755 --- a/packages/@okta/vuepress-site/docs/journeys/index.md +++ b/packages/@okta/vuepress-site/docs/journeys/index.md @@ -8,6 +8,7 @@ journeys: - OCI-mobile - OCI-web-sign-up - OCI-migrate-users + - OCI-prepare-upgrade-oie --- # Journeys @@ -32,3 +33,7 @@ Journeys break down your development project into consumable steps: Implement a sign-up form for your web app, reducing onboarding friction and accelerating user acquisition. Provide a smooth and secure activation experience as you move human user identities into Universal Directory from another user store. +
+ + Plan, update, test, and validate your setup so that you can confidently complete a smooth production upgrade. + diff --git a/packages/@okta/vuepress-theme-prose/const/navbar.const.js b/packages/@okta/vuepress-theme-prose/const/navbar.const.js index 6076e027bee..5a459e326ab 100644 --- a/packages/@okta/vuepress-theme-prose/const/navbar.const.js +++ b/packages/@okta/vuepress-theme-prose/const/navbar.const.js @@ -1262,6 +1262,15 @@ export const journeys = [ }, ] }, + { + title: "Upgrade to Okta Identity Engine", + subLinks: [ + { + title: "Prepare to upgrade to Okta Identity Engine", + journeyName: "OCI-prepare-upgrade-oie" + }, + ] + }, ], } ];