<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008C3jdYSAROkta Classic EngineAdministrationAnswered2024-08-11T09:04:05.000Z2017-09-05T19:28:04.000Z2020-03-05T21:23:18.000Z

jgs0z (jgs0z) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM
Is there a way to disable a user account after a period of inactivity?
I have a requirement that user accounts be disabled after a set period of inactivity.  Is there anyway to enable such a feature and to choose the period?  

 

I'm looking for a seting like "Disable user account if user has not logged in in XX days".  This would then require the Admin to go back in and re-enable the account if necessary.

 

It shoudl also email the administrator or in another way notify them if an account was disabled due to inactivity as well as log the event.
  • 7 answers
  • 10.45K views
PeterN.01946, API - Security Log ReaderS.90161, and 6 others like this.

  • kbazp (kbazp)

    We have similar requirements.

    If you master users in AD, then the best bet is to run a script to disable user accounts after set period of inactivity.

    I don't believe Okta has a feature yet. You can always submit an FRE for your use case.

  • pzna8 (pzna8)

    We have the same requirement - not all of our accounts are managed in AD (we also use the universal directory) so the funtionality would need to be in Okta.

  • 0v95e (0v95e)

    We have the same requirement and need it to be via Okta.  Suspend all inactive accounts (no login for xx days)​

  • 0v95e (0v95e)

    Thanks

    Ned Geiser
    Program Manager, Enterprise Project Management Office
    office: (317) 403-1032| mobile: (317) 201-7695

    Upcoming PTO Dec 20-31

    [cid:    image001.png@01D0C09B.07C1CE30]
    One American Square, P.O. Box 368
    Indianapolis, IN 46206
    www.oneamerica.com<http://www.oneamerica.com/>

    The companies of OneAmerica:
    AUL | State Life | OneAmerica Retirement Services | McCready & Keene | OneAmerica Securities | PML
    Expand Post

  • h64mu (h64mu)

    Hi

    I have a question related to the deactivation with Automations feature.

    I want to change the lifecycle status of the user like this.

     

    1. If the user is inactive more than 90 days, change the status to "Suspended". -> Can be achieved by Automation.
    2. If the user is inactive more than 180 days, change the status to "Deprovisioned (Deactivated)". -> Cannot be achieved with Automations because in my understanding the Automations' inactivity check is only with Active State users. As #1 Automations rule hits and a user is "Suspended" status (Inactive State), the user doesn't hit the #2 rule.

     

    Is my understanding correct, or is there any other way to achieve this?

    Thanks.

    Expand Post
This question is closed.
Loading
Is there a way to disable a user account after a period of inactivity?