All scheduled Active Directory (AD) imports run as Incremental Imports, which only scan user and group objects with an updated value for the attribute uSNChanged since the last Incremental import. This article covers a few potential causes for an Incremental Import being converted into a Full import.

• Active Directory (AD)
• Imports

An Incremental Import is automatically converted into a Full Import when one or more of the following occur:

• When a container or Organizational Unit (OU) is checked or unchecked in the Integration settings of AD in the Okta Admin Console.
• When a selected OU is removed from AD while the import is taking place.
• After updating the LDAP import filter.
• The AD Agent cannot reach the same AD Domain Controller used in the prior incremental import job.

System Log will contain an entry indicating that an Incremental Import has been converted to a Full Import: