Okta Scheduled Imports Fail to Auto-Confirm Exact User Matches
Last Updated:
Overview
When performing a scheduled import, Okta fails to auto-confirm exact user matches because it does not re-evaluate user matching conditions during subsequent scheduled imports. Resolve this issue by enabling the Early Access feature to force rematch imported users or by performing a manual import.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Application imports
- Early Access (EA) features
Cause
Okta does not re-evaluate user matching conditions during subsequent scheduled incremental or full imports by default. Okta only re-evaluates these conditions during subsequent manual imports, which prevents the auto-confirm exact match functionality from triggering during scheduled imports.
Solution
Verify the user creation and matching settings.
Review the application provisioning settings in the Okta Admin Console to ensure the auto-confirm exact match functionality is enabled.
Review the following image for the application import settings.
Review the following image for the user creation and matching settings.
Enable the force rematch feature for scheduled imports.
Enable the Early Access feature in the Okta Admin Console to force Okta to re-evaluate imported users and rematch them against Okta users during all subsequent scheduled imports.
- In the Okta Admin Console, navigate to Settings > Features.
- Locate the Force rematch imported users to Okta users feature in the Early Access section.
- Select the toggle to enable the feature.
Review the following image for the Early Access feature toggle.
NOTE: Administrators can continue performing manual imports to resolve this issue as an alternative to enabling the Early Access feature.
What query verifies the feature enablement in the Okta System Log?
Query the Okta System Log to verify the successful enablement of the force rematch feature.
- In the Okta Admin Console, navigate to Reports > System Log.
- Enter the following query into the search field:
eventType eq "system.feature.enable" and target.id eq "ENG_FORCE_REMATCH_FOR_IMPORTS"
- Select the search icon.
Review the following image for the System Log search query results.
