Modify Priority on Active Directory/LDAP Okta Group Assignments
Jan 13, 2026
Okta Classic Engine
Directories
Okta Identity Engine
All Engines
Overview
On the Okta tenant, it is possible to push users to Active Directory (AD) by assigning the group they are part of to the Directory Integration as described in the How to Sync/Push Users from Okta to Active Directory article.
Admins may want the following desired outcome:
Modifying the Group assignment priority for Okta groups that are being pushed to AD, as shown in the image below.
Applies To
- Active Directory (AD)
- LDAP
- User Push to AD
- User Push to LDAP
- Universal Directory
- Group Push
- Group Assignment
Solution
Okta does not currently support changing the priority of the group assignment when pushing groups along with users to the Active Directory/LDAP integration, as it does not affect the creation of users/groups in AD.
The changing of priority is a planned feature and will be implemented in future iterations of the Active Directory/LDAP integrations.
