Okta Limits for Groups, Group Push, and Group Rules
Last Updated:
Overview
Okta organizations have specific limits regarding the number of groups, pushed groups, and Group Rules. While the total number of groups and pushed groups is unlimited, Okta restricts organizations to a maximum of 2000 Group Rules.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Group Push
- Groups
- Group Rules
- Okta Integration Network (OIN)
- Lifecycle Management (LCM)
Solution
What are the limits for groups and Group Rules in Okta?
Okta allows an unlimited number of groups in an organization and pushes an unlimited number of groups to an application. However, Okta restricts organizations to a maximum of 2000 Group Rules.
What are the limitations and recommendations for Group Push by rule?
The following limitations and recommendations apply when configuring Group Rules and Group Push by rule.
- Okta recommends a maximum of 100 groups per rule when using Group Push by rule. Exceeding this limit triggers rate limiting and increases processing time.
- Group Push by rule is unavailable for Active Directory (AD) integrations.
How does Okta push groups to applications?
Okta pushes groups to applications using one of two methods.
- By name: Administrators select groups from Okta for creation and updating in the target application. Okta allows an unlimited number of groups when using Pushed Groups By Name.
- By rule: Administrators create a search rule that pushes any matching groups to the target application. The rule uses criteria based on the Group name, Group description, or both, to push groups simultaneously.
NOTE: Service providers sometimes impose specific limitations on the number of groups an administrator manages in the application, which limits the groups Okta pushes to the service provider. Verify any potential limitations with the specific service provider.
