Script to delete user

j5v7c (j5v7c)

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:27 AM

FYI, I cobbled together a powershells script that we run on a schedule to keep our deactivated users tidy. I am by no means elegant at scripting, but it works.

# this script uses the Okta module (https://github.com/mbegan/Okta-PSModule) to get a list of deprovisioned accounts that havent had a status changed in X days and outputs it to a CSV.

# It then users the Okta.Core.Automation module (https://github.com/okta/okta-sdk-dotnet/tree/legacy/Okta.Core.Automation) to delete said accounts from Okta

# not elegant, but functional until there are better powershell tools out there

# Last modified 7/6/17 - Nikki D

#Set the Variables

$TerminatedAccountWhen = ((Get-Date).AddDays(-45)). date

$logfile = "C:\Scripts-IDM\Results\Oktadeactivateduserstargetedfordelete_$((Get-Date).ToString('MM-dd-yyyy_hh-mm-ss')).txt"

$recoveryfile = "c:\scripts-idm\results\oktadeactivate.csv"

$workfile = "c:\scripts-idm\results\workfile.csv"

$path = "C:\Scripts-IDM\Results"

$limit = (Get-Date).AddDays(-95). date

# creating a transcript for auditing

$ErrorActionPreference="SilentlyContinue"

Stop-Transcript | out-null

$ErrorActionPreference = "Continue"

Start-Transcript -path $logfile

#Generating the list with Okta module

$env:PSModulePath

import-module Okta

oktaListDeprovisionedUsers -oOrg prev | where {$_.statusChanged -lt $terminatedaccountwhen} | export-csv -path $recoveryfile -notypeinformation

oktaListDeprovisionedUsers -oOrg prev | where {$_.statusChanged -lt $terminatedaccountwhen} | Select id | export-csv -path $workfile -notypeinformation

#executing delete with core.automation

Import-Module Okta.Core.Automation

Connect-Okta -Token "XXXXXXXXX" -FullDomain "https://yourorg.oktapreview.com"

Import-csv $workfile | % {

Delete-OktaUser $_.id

}

Stop-Transcript

#Clean up old CSVs

Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

Expand Post

james.flores1.4616875318781074E12 (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
Hi Nidhin,

It sounds like the Delete User API call will resolve this for you, http://developer.okta.com/docs/api/resources/users.html#delete-user. You can set this up in Postman and give it a test before writing a program to do it for a larger user base. CAUTION This action cannot be recovered!

For more information on setting up Postman please visit http://developer.okta.com/docs/api/getting_started/api_test_client.html
Expand Post
j5v7c (j5v7c)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:27 AM
FYI, I cobbled together a powershells script that we run on a schedule to keep our deactivated users tidy. I am by no means elegant at scripting, but it works.

# this script uses the Okta module (https://github.com/mbegan/Okta-PSModule) to get a list of deprovisioned accounts that havent had a status changed in X days and outputs it to a CSV.
# It then users the Okta.Core.Automation module (https://github.com/okta/okta-sdk-dotnet/tree/legacy/Okta.Core.Automation) to delete said accounts from Okta
# not elegant, but functional until there are better powershell tools out there
# Last modified 7/6/17 - Nikki D

#Set the Variables
$TerminatedAccountWhen = ((Get-Date).AddDays(-45)). date
$logfile = "C:\Scripts-IDM\Results\Oktadeactivateduserstargetedfordelete_$((Get-Date).ToString('MM-dd-yyyy_hh-mm-ss')).txt"
$recoveryfile = "c:\scripts-idm\results\oktadeactivate.csv"
$workfile = "c:\scripts-idm\results\workfile.csv"
$path = "C:\Scripts-IDM\Results"
$limit = (Get-Date).AddDays(-95). date

# creating a transcript for auditing
$ErrorActionPreference="SilentlyContinue"
Stop-Transcript | out-null
$ErrorActionPreference = "Continue"
Start-Transcript -path $logfile

#Generating the list with Okta module
$env:PSModulePath
import-module Okta
oktaListDeprovisionedUsers -oOrg prev | where {$_.statusChanged -lt $terminatedaccountwhen} | export-csv -path $recoveryfile -notypeinformation
oktaListDeprovisionedUsers -oOrg prev | where {$_.statusChanged -lt $terminatedaccountwhen} | Select id | export-csv -path $workfile -notypeinformation

#executing delete with core.automation
Import-Module Okta.Core.Automation
Connect-Okta -Token "XXXXXXXXX" -FullDomain "https://yourorg.oktapreview.com"
Import-csv $workfile | % {
Delete-OktaUser $_.id
}

Stop-Transcript

#Clean up old CSVs
Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

Expand Post

Your Privacy

Your Privacy

Strictly Necessary Cookies

Strictly Necessary Cookies

Functional Cookies

Functional Cookies

Performance Cookies

Performance Cookies

Share or Sell of Personal Data

Share or Sell of Personal Data

Advertising Cookies

Your Privacy

Your Privacy

Strictly Necessary Cookies

Strictly Necessary Cookies

Functional Cookies

Functional Cookies

Performance Cookies

Performance Cookies

Share or Sell of Personal Data

Share or Sell of Personal Data

Advertising Cookies