The logs show that Okta deprovisioned users from a critical application Skip to main content
https://support.okta.com/help/oktaarticledetailpage?childcateg=&id=ka02a000000xaopsa0&source=documentation&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fdocumentation%2fknowledge_article%2fwe-re-receiving-calls-from-mulitple-users-about-sudden-loss-of-access-to-critical-app-the-logs-show-that-okta-deprovisioned-these-users-what-changed-to-trigger-this-deprovisioning-event
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Average Rating:
The logs show that Okta deprovisioned users from a critical application
Published: Apr 4, 2017   -   Updated: Apr 21, 2017

Issue: Multiple users suddenly deprovisioned from application 

Cause: User inadvertently unassigned from provisioning-enabled application

Applies to: 

  • All Browsers
  • All OS

Resolution:

  • Consider what may have changed in the source directory (ie Active Directory if the Okta user was imported from AD).
  • Check the groups assigned to the application and verify that all expected groups are present
  • in Directory→Groups, navigate to the group(s) assigned to the application and verify whether the users are still listed as a member of the group.
    • If not, verify whether they still belong to the corresponding group in the source directory (ie Active Directory if the group was imported from AD).
      • If the user appears as a member of the group in AD but not as a member of the group in Okta, please contact Okta Support.
    • if the group assigned to the application is an Okta-mastered group and is missing expected users, check the Rules tab to see if a rule is in place that assigns users to the group based upon certain criteria.  Then, ensure that the criteria used by the rule still applies to the user(s)

To view additional common customer problems, click here.

Post a Comment