j5v7c (j5v7c) asked a question.
Okta Directory Office 365 Provisioning
Is it possible to have a user created in AD, synced to Okta, and a temporary password emailed to our helpdesk team? The reason being, when I create a user in AD, I have Okta set to automatically provision the user's email account in Office 365. This is FANTASTIC, except for the fact that we are using Okta as our directory master and password source for all directories. This means that there is no password for Office 365, or for Okta. So no other way to create a password. Before you suggest that we use AD authentication, we thought that through. The problem there is that we are combining 4 different companies, 2 of which are primarily cloud (no active directory). Why aren't we moving the other companies away from active directory? Because both of those companies have Active Directory heavily integrated into internal systems.
Thank you for contacting Okta Support.
Unfortunately, your scenario is not currently supported, as the Okta user has to either be mastered by AD (moment in which the user is going to inherit the AD password - with Delegated Authentication turned on) or mastered by Okta, so the user has to set up his account and choose a password.
If you want, however, to set a user's password (in case the user is not AD mastered), you can use the following API call: {{url}}/api/v1/users/{{userID}}. in which {{url}} = your Okta domain and {{userID}} = the user's ID.
If you want for us to further investigate and have a better understanding of your use case, please don't hesitate to open a Support Case with us.
Paul Auer
Technical Support Engineer | Okta