[danbarr]

Description

Fixes four docs gaps and bugs found while walking through the demo scenarios. UI labels and behavior were verified against stacklok-enterprise-platform at v0.25.0.

• Okta directory sync: the reconciler only takes attributes from target app profile properties that have a SCIM destination (externalName), so a target app without them syncs users with no display name or email, and nothing is logged. Adds a "Map user attributes" section with a Terraform example, updates Prerequisites to say no SCIM connection is configured on the target app, adds a display-name/email check to Verify synchronization, and adds a troubleshooting entry. Also adds hcl to the Prism additionalLanguages for the new code block.
• Connector Activity: calls the connector policy refuses never appear on the Activity tab, and the audit log records them as application_error. Updates the Activity section, rewrites step 3 of "Check a user's access" to use the audit log, and notes policy refusals in the audit outcome table.
• Manage budgets: matches the current Budgets screen.
  • Defaults is now a button on the User Budgets tab.
  • Documents the per-user actions (Set a custom budget, Edit custom budget, Use default) and the group actions (Edit budget, Delete budget).
  • Corrects Edit Budgets: it reorders group budget priority rather than bulk-editing users.
  • Explains that a user budget falls through to group budgets once it runs out.
• Organization spend screen: adds a "Monitor spend" section to Manage budgets covering the Total spend chart and the Groups/Users usage table. The API page keeps the endpoint table and links to it, and the console overview now lists Organization.

The Service Accounts tabs on these screens are left out while that feature is behind a flag.

Note for reviewers: additionalLanguages grammars, including the existing bash and powershell, don't currently highlight anywhere on the site (production included), so the new HCL block renders unhighlighted like the others. That's a separate, pre-existing issue.

Type of change

• Documentation update

Related issues/PRs

Fixes #1281
Fixes #1282
Fixes #1283
Fixes #1287

Related: #1243 (console data retention). Interim wording tracks these platform bugs: stacklok/stacklok-enterprise-platform#3901, stacklok/stacklok-enterprise-platform#5758, stacklok/stacklok-enterprise-platform#5764

Submitter checklist

Content and formatting

• I have reviewed the content for technical accuracy
• I have reviewed the content for spelling, grammar, and style

Reviewer checklist

Content

• I have reviewed the content for technical accuracy
• I have reviewed the content for spelling, grammar, and style

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs-website	Ready	Preview	Oct 29, 2026 1:48am UTC

[Copilot]

🟡 Changes recommended

The troubleshooting guidance incorrectly attributes missing audit events to client or connection problems without first requiring tool-call audit events to be enabled and the call reproduced.

1 open issue

• Require tool-call audit events before blaming client connectivity · New

What changed in this PR

Updates Stacklok Enterprise documentation to address gaps found during demo walkthroughs, covering directory synchronization, connector troubleshooting, and AI spend management.

Changes:

• Adds Okta attribute-mapping instructions, a Terraform example, and synchronization checks.
• Corrects connector Activity and audit-log guidance for policy-refused calls.
• Updates budget controls, explains group-budget fallback, and documents Organization spend monitoring.

File	Description
docusaurus.config.ts	Adds HCL to Prism's additional languages.
docs/​platform/​enterprise-directory/​okta-directory-sync.mdx	Documents SCIM attribute mappings and missing-profile troubleshooting.
docs/​platform/​enterprise-console/​index.mdx	Links to Organization spend monitoring.
docs/​connector-gateway/​support-connector-access.mdx	Directs policy-refusal investigations to audit events.
docs/​connector-gateway/​forward-audit-logs.mdx	Clarifies the audit outcome for policy-refused calls.
docs/​connector-gateway/​connectors.mdx	Corrects Activity coverage and its limitations.
docs/​ai-gateway/​manage-budgets.mdx	Updates budget actions and adds spend-monitoring guidance.
docs/​ai-gateway/​budgets-and-pricing.mdx	Clarifies budget fallback and links to console instructions.

_{Review effort: Balanced}