Okta is Not Deprovisioning Users
Mar 26, 2026
Okta Integration Network
Okta Classic Engine
Okta Identity Engine
Overview
Okta is not deprovisioning users from applications even though the Deactivate Users provisioning option is enabled.
Applies To
- Provisioning
- Deactivate Users
- External ID
- Okta Classic Engine
- Okta Identity Engine (OIE)
Cause
Solution
- On the Okta Admin Console, navigate to Applications > Open the desired Application.
- Switch to the Assignments tab.
- Click the X next to the assignment to unassign users/groups from the application in Okta.
- Click the Assign button to reassign the users/groups to the application in Okta.
Validate the presence of External IDs by clicking the pencil icon next to the user's assignment in the Okta application.
NOTE: Uncheck the Deactivate Users provisioning option before performing this action to avoid user deactivations (applies to users added after provisioning was enabled for the application in Okta).
