Expected action when a user is removed from AD group Skip to main content
https://support.okta.com/help/answers?id=906f0000000hzz5iac&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Davis BeemanDavis Beeman 

Expected action when a user is removed from AD group

I removed a user from an AD group.  This AD group is set up as the group for an app.  I expected that user to be removed from the app, but it appears they were just converted to an individual assignment instead of a group assignment.  Is that the expected reaction?  If so, how do I set it up so when a user is removed from a group, they are removed from the app?
api-workday api-workdayapi-workday api-workday
Is there a chance that the user had an individual assignment to the application prior to the group assignment?
Davis BeemanDavis Beeman
No, the user was specifically being used to test adding by group.  He was added to the app when the group synced to our AD, then when removed in AD and re-synced, he remained in the app as an individual assignment