Assigning an Okta Application to a Deactivated User
Last Updated:
Administration
Okta Classic Engine
Okta Identity Engine
Overview
Okta does not allow administrators to assign applications to deactivated users. When an administrator deactivates a user, Okta unassigns the user from all applications, although group memberships remain intact. Administrators can only assign applications to users in specific active or pending states.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Okta Users
- Applications
Solution
Can an application be assigned to a deactivated user?
Assigning deactivated users to applications is not possible. While deactivating a user does not remove their group memberships, Okta unassigns the user from all applications. Exceptionally, for the Admin Console application, Okta maintains membership as described in the Learn about administrators documentation.
Administrators can only assign a user to an application if the user is in one of the following states.
- Active
- Pending user action
- Staged
- Password Reset
- Password expired
- Locked out
