Converting from AD to Okta for SharePoint People Picker Skip to main content
https://support.okta.com/help/answers?id=9062a000000bmezqai&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
John HowieJohn Howie 

Converting from AD to Okta for SharePoint People Picker

Hi All, 
I have a sharepoint farm with a number of AD trusts/domains integrated into the people picker.  We have Okta so I'd like to move away from those messy trusts and use the okta integration with the sharepoint people picker.  That said, what will happen to all of my existing permissions based on AD in SharePoint?  Will I have to redo them or do I just integrate Okta to the people picker and remove the old domains and everything works out ok?

Thanks!
Raphael LondnerRaphael Londner (Okta, Inc.)
Hi John,

Unfortunately, the permissions don't "magically" migrate from AD to Okta. You basically would have to use the Move-SPUser PowerShell command on each site collection to migrate AD users to Okta users and thus maintain the same permissions. This could be slightly more complicated for AD groups since SharePoint stores the AD groups' SID to maintain the permissions, while we provide the group name as part of the user group claims.

I suggest you get in touch with your Account Executive to investigate your migration options as this could prove fairly complex.

Thank you,

Raphael.