We're working on a project at the moment, where we intend to switch over the master to Workday, currently its AD.
When we cutover the expectation is that Okta will create and manage AD accounts that are mastered by WD. There are a few things I'm not clear on, firstly is it possible to specify the destination OU based on attributes without relying on Workday provisioning groups? secondly if a user is provisioned in an OU - lets say sales - then someone moves them to a different OU - we'll go with finance - will Okta then move them back from finance to sales? or is the OU a once off and not updated like attributes are?