<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content

Okta Scheduled Imports Fail to Auto-Confirm Exact User Matches

Okta Integration Network
Okta Classic Engine
Okta Identity Engine

Overview

When performing a scheduled import, Okta fails to auto-confirm exact user matches because it does not re-evaluate user matching conditions during subsequent scheduled imports. Resolve this issue by enabling the Early Access feature to force rematch imported users or by performing a manual import.

Applies To

  • Okta Identity Engine (OIE)
  • Okta Classic Engine
  • Application imports
  • Early Access (EA) features

Cause

Okta does not re-evaluate user matching conditions during subsequent scheduled incremental or full imports by default. Okta only re-evaluates these conditions during subsequent manual imports, which prevents the auto-confirm exact match functionality from triggering during scheduled imports.

Solution

Verify the user creation and matching settings.

Review the application provisioning settings in the Okta Admin Console to ensure the auto-confirm exact match functionality is enabled.

Review the following image for the application import settings.

Import

Review the following image for the user creation and matching settings.

User Creation &amp; Matching

Enable the force rematch feature for scheduled imports.

Enable the Early Access feature in the Okta Admin Console to force Okta to re-evaluate imported users and rematch them against Okta users during all subsequent scheduled imports.

  1. In the Okta Admin Console, navigate to Settings > Features.
  2. Locate the Force rematch imported users to Okta users feature in the Early Access section.
  3. Select the toggle to enable the feature.

Review the following image for the Early Access feature toggle.

Force rematch imported users to Okta users

NOTE: Administrators can continue performing manual imports to resolve this issue as an alternative to enabling the Early Access feature.

What query verifies the feature enablement in the Okta System Log?

Query the Okta System Log to verify the successful enablement of the force rematch feature.

  1. In the Okta Admin Console, navigate to Reports > System Log.
  2. Enter the following query into the search field:
eventType eq "system.feature.enable" and target.id eq "ENG_FORCE_REMATCH_FOR_IMPORTS"
  1. Select the search icon.

Review the following image for the System Log search query results.

System log search query

Related References

Loading
Okta Scheduled Imports Fail to Auto-Confirm Exact User Matches | Okta Support