How to disable ad groups sync Skip to main content
https://support.okta.com/help/answers?id=9062a000000xzhuqag&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Av ShchAv Shch 

How to disable ad groups sync

I don't need AD groups in Okta. Is there a way to configure the agent not to sync AD groups and sync only users?
Kevin TurnerKevin Turner (Okta, Inc.)
In the agent config settings, you can select a single OU where no groups are stored.

NOTE: This will then not synch any groups, and will remove any AD groups that have already been synched to Okta. So If you're using any exisiting AD groups previously synched to perform provisioning and deprovisioning, PLEASE BE VERY CAREFULL.
Av ShchAv Shch
This is just a work around as the AD sync agent needs to have an optio to sync usernames only w/o AD Groups.
Kristin BakerKristin Baker
There are settings to change groups you sync. There's also options to choose which OU's to sync.
Av ShchAv Shch
Thats the whole point. It does not look like there is a way to not to "enable" the sync for Groups. The work around is to "sync" with OU which does not have any groups, but if groups are added into the OU by mistake, the agent would sync these groups.