AD agent used for provisioning only Skip to main content
https://support.okta.com/help/answers?id=906f0000000i0epia0&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Patrick CesardPatrick Cesard 

AD agent used for provisioning only

Hello.

We plan on importing users in Okta from SuccessFactors, which will stay the Master (the authoritativ source for users). We then would like to provision an AD account for for some of the users who need it. Can the AD agent be used for this to do provisioning only? Or is the AD agent mostly used for importing users from AD?
James GarvinJames Garvin (Okta)
It is possible to provision users from Okta to AD.  Create a Provisioning Group that is associated with a Directory (your AD Domain) and users in that group will provision to AD.
 
Okta AdminOkta Admin
AD agent can be used to provision users, groups, groupmembership updates as well.
Patrick CesardPatrick Cesard
Hi James. I created a Group and added my AD domain to it. I then added a user to the group hoping to provision him an account in AD but get the following error:

"An error occurred while assigning this app.
Automatic provisioning of user John Doe to app Active Directory failed: Matching user not found"

It looks like it'strying to find the user in AD?