Can OKTA sync AD user passwords from one domain to another?

Loading

Skip to Navigation Skip to Main Content

Search

Search

Select Language

0D50Z00008G7UtCSAVOkta Classic EngineAdministrationAnswered2024-04-30T09:18:24.000Z2017-04-19T17:05:09.000Z2018-03-15T17:12:30.000Z

j5v7c (j5v7c) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM

Can OKTA sync AD user passwords from one domain to another?

Hello,

We are in the process of an AD domain migration from one old domain to a new domain. All objects will be migrated. I'm having a hard time tracking down documentation that outlines OKTA's multi domain management capabilities. Can OKTA syncronize user object passwords, and other variables, from one domain to another? Can we use OKTA to replace some of the ADMT functionalities?

What capabilities does OKTA have that may help us migrate from one domain to another? IE cross domain application authentication, user management etc

marc.johnston1.4609982285157063E12 (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
Hi Jace,

Okta currently does not support connecting one Okta account to mutiple AD Domains. Okta accounts connect to AD domains on a 1:1 ratio. So the password sync features can sync AD to Okta or Okta to AD for only one domain.

Sync Pasword - Under Notes - It is not possible to sync passwords from one AD domain and also push passwords to a different AD domain from a single Okta org, such as when a customer wants to pull users from multiple departmental or subsidiary ADs and push them to a central or application-specific AD.

https://help.okta.com/en/prod/Content/Topics/Security/Security_Using_Sync_Password.htm?Highlight=Using%20Sync%20Password
Expand Post

This question is closed.

Recommended content

Forum

Migrating users from one AD domain to another in the same forest and on OKTA

Forum

Sync passwords from OKTA to AD

Forum

Want to map AD setting "Account is sensitive" from source AD via OKTA to another AD domain

Forum

Password from AD, Will it be synced to OKTA?

Loading

Can OKTA sync AD user passwords from one domain to another?