As a part of OKTA SSO for SAM setup, read only admin is provided to my user account on OKTA, post which I'm able to validate the connection. However, the problem is if a service account which is not on OKTA doesn't have option to validate the connection.
Customer has rejected below 2 solutions:
1. Sync a service account from OKTA which has read only admin on OKTA and sam_integration on ServiceNow - This option is rejected, as the service accounts lie in different BU/OU and customer doesn't want to sync this information to user table
2. Provide readonly admin on OKTA to actual user existing in ServiceNow - This is rejected as this not a standard practice.
Please let me know if there is any other work around. Thank you in advance.
