No Option to Delete the Default LDAP Password Policy in Okta
Last Updated:
Okta Classic Engine
Okta Identity Engine
Directories
Overview
The default Lightweight Directory Access Protocol (LDAP) password policy remains visible and lacks a deletion option after an administrator removes the LDAP integration. Okta deactivates the policy and stops evaluating it once the organization removes the integration and has no LDAP-sourced users remaining.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Lightweight Directory Access Protocol (LDAP) Policy
- Password Authenticator
Cause
Okta does not provide a deletion option for the default LDAP password policy by design.
Solution
Why does the LDAP password policy lack a deletion option?
Okta lacks a deletion option for the LDAP Policy under the Password Authenticator. Understand the behavior of the default LDAP password policy and learn how to submit a feature request to remove it.
- Okta stops evaluating or applying the policy to any users once an administrator removes the LDAP integration, and the organization retains no LDAP-sourced users.
- The policy effectively becomes inactive even though it remains visible in the list.
- Raise a feature request through the Okta Ideas Community page if disabling or removing this policy represents a business requirement. Refer to the Okta Ideas: Step-by-Step Guide for instructions.
