Converting user accounts from a social Identity Provider (IdP) to Okta-sourced enables the management of credentials for users that originated from social providers. This conversion simplifies the registration process for end users when utilizing social logins for new user registrations. Administrators can perform this conversion through the Okta Admin Console or via the Okta Application Programming Interface (API).

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Social Logins
• Identity Providers (IdPs)
• Application Programming Interface (API)

How is a social provider account converted to Okta-sourced via the Okta Admin Console?

Locate the user account in the Okta Admin Console and initiate a password reset to convert the account to Okta-sourced.

1. Navigate to Directory > People and locate the desired user account.
2. Click Reset or Remove Password.

3. Select Send a reset password email.

How is a social provider account converted to Okta-sourced via the Okta API?

Execute Okta API calls to reset the user password, reactivate the user, and exchange the activation token to complete the conversion process.

1. Call the API endpoint /api/v1/users/{{userID}}/lifecycle/reset_password?sendEmail=false to transition the user to the PROVISIONED state and set Okta as the credential provider.
   • NOTE: Setting sendEmail=true prompts Okta to send the Password Reset by Admin email template.
2. Call the API endpoint /api/v1/users/{{userID}}/lifecycle/reactivate?sendEmail=true.
   • Okta sends the User Activation email template because the user is in a provisioned state.
3. Either template includes an activation token that the application exchanges for a state token, allowing the configuration of a new password through /api/v1/authn/credentials/reset_password.

NOTE: If the user details indicate that a different source, such as Active Directory, sources the profile, the administrator must unlink the user from the Identity Provider. Unlink the user in the Okta Admin Console by selecting More Actions for the user and disconnecting the account from the Identity Provider, or utilize the Okta API to unlink the user.

Related References

• Primary authentication with activation tokens
• Reset Password /api/v1/authn/credentials/reset_password