Okta Organizational Unit Selection Unavailable During Provisioning Group Configuration

When configuring Okta provisioning groups for Active Directory (AD) via the Directories tab in the group, the final configuration screen fails to display the Default Attributes section containing the Organizational Unit (OU) selection tool. Instead, Okta presents only the Custom Attributes section, preventing the selection of the downstream target OU. This issue occurs when the Create Users option is not selected in the Directory integration settings, and enabling this option resolves the issue.

The following image displays the expected configuration screen containing the Default Attributes section and the Organizational Unit selection tool.

The following image displays the actual configuration screen when this issue occurs, omitting the Default Attributes section entirely.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Active Directory (AD)
• Provisioning Group
• Organizational Unit (OU)

The Default Attributes section is not displayed because the option to Create Users in the Directory integration is not enabled.

How is the Organizational Unit selection tool restored?

Enable the Create Users option within the Active Directory integration settings to restore the Organizational Unit selection tool.

1. Navigate to Admin > Directory > Directory Integrations > [AD] > Provisioning > To App.
2. In the General section, select Edit, and then select the Create Users checkbox to enable the feature.
3. Select Save.

The following image demonstrates the enabled Create Users checkbox within the General section of the Provisioning tab.

The OU selection tool now displays in the Default Attributes section of the Manage directories configuration screen.

The following image displays the restored Organizational Unit selection tool within the Default Attributes section.