Okta User Create to App Assignment to Slack Notify

arazzo: 1.0.1
info:
  title: Okta User Create to App Assignment to Slack Notify
  summary: Create an Okta user, assign them to an application, then notify Slack.
  description: >-
    An access-provisioning workflow that creates a new user in Okta, assigns
    that user to a target application so they gain SSO access, and posts a Slack
    notification confirming the new access grant. Chains the created Okta user
    id into the application assignment request.
  version: 1.0.0
sourceDescriptions:
  - name: oktaApi
    url: https://raw.githubusercontent.com/api-evangelist/okta/refs/heads/main/openapi/okta-group-api-openapi.yml
    type: openapi
  - name: slackApi
    url: https://raw.githubusercontent.com/api-evangelist/slack/refs/heads/main/openapi/slack-chat-api-openapi.yml
    type: openapi
workflows:
  - workflowId: create-user-assign-app
    summary: Create an Okta user, assign to an app, and notify Slack.
    description: >-
      Creates an Okta user, assigns the new user to an application by id, and
      posts a Slack message announcing the access grant.
    inputs:
      type: object
      properties:
        firstName:
          type: string
        lastName:
          type: string
        email:
          type: string
        login:
          type: string
        appId:
          type: string
        slackChannel:
          type: string
    steps:
      - stepId: create-user
        description: Create the new user in Okta.
        operationId: $sourceDescriptions.oktaApi.createUser
        requestBody:
          contentType: application/json
          payload:
            profile:
              firstName: $inputs.firstName
              lastName: $inputs.lastName
              email: $inputs.email
              login: $inputs.login
        successCriteria:
          - condition: $statusCode == 200
        outputs:
          oktaUserId: $response.body#/id
          userStatus: $response.body#/status
      - stepId: assign-app
        description: Assign the new user to the target application.
        operationId: $sourceDescriptions.oktaApi.assignUserToApplication
        parameters:
          - name: appId
            in: path
            value: $inputs.appId
        requestBody:
          contentType: application/json
          payload:
            id: $steps.create-user.outputs.oktaUserId
            scope: USER
        successCriteria:
          - condition: $statusCode == 200
        outputs:
          assignmentId: $response.body#/id
      - stepId: notify-slack
        description: Announce the new access grant in Slack.
        operationId: $sourceDescriptions.slackApi.postChatPostmessage
        requestBody:
          contentType: application/json
          payload:
            channel: $inputs.slackChannel
            text: Assigned $inputs.email to application $inputs.appId in Okta.
        successCriteria:
          - condition: $statusCode == 200
        outputs:
          messageTs: $response.body#/ts
    outputs:
      oktaUserId: $steps.create-user.outputs.oktaUserId
      assignmentId: $steps.assign-app.outputs.assignmentId
      messageTs: $steps.notify-slack.outputs.messageTs