Unable to Clear Active Directory Organizational Unit Selection in Okta
Last Updated:
Directories
Overview
When configuring an Active Directory (AD) integration, Okta prevents clearing child Organizational Units (OUs) if the parent OU is selected. Clear the parent OU first before adjusting the child OU membership to resolve this behavior.
The following image displays the grayed-out child OUs that prevent deselection during the configuration of User OUs and Group OUs connected to Okta.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Directories
- Active Directory (AD)
- Provisioning
- Organizational Units (OUs)
Cause
This is expected behavior. A child OU cannot be deselected while the parent OU is selected.
Solution
How is a child Organizational Unit cleared in Okta?
Clear the parent OU first to enable toggling and deselection of child OUs, then adjust the child OU membership as needed.
