What needs to happen in Okta when you rename an OU in AD?

Loading

Skip to Navigation Skip to Main Content

Search

Search

Select Language

0D50Z00008G7UyiSAFOkta Classic EngineAdministrationAnswered2024-04-17T13:06:00.000Z2016-09-09T22:39:24.000Z2016-09-09T22:39:24.000Z

9zha8 (9zha8) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM

What needs to happen in Okta when you rename an OU in AD?

What needs to happen in Okta when you rename an OU in AD?

Apparently, When I renamed an OU in our AD this caused a chain reaction in

All users in that OU are immediately disabled in okta

All apps are immediately de-provisioned

All users in that OU are immediately disabled in AD

O365 will either “block” the user, remove their license, or delete the user based on the sequence/timing of events.

Behavior with other sync’d applications could vary greatly depending on the application and integration with okta.

Similarly creating a new OU, means that that OU is not automatically sync’d in okta

Is this the way Okta supposed to work? Okta can not notice changes and adjust?

miqxq (miqxq)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
I assume you are talking about a ROOT OU? If so, then yes, renaming would cause deprovisioning. Ditto for a new OU not being synched - if it's a root OU it wont syncy automatically - and you wouldn't want it to since it may contain service or other accounts that you don't want in Okta. If you need a new root OU to sync, do an import then select it in AD Settings, User OUs connected to Okta.

If you create a new OU underneath an OU that is already connected to Okta then it will be picked up automatically. Also renaming of OU's other than root appears to work fine for me.
Expand Post

This question is closed.

Recommended content

Forum

What causes a disabled user in Okta to be moved to a different OU in AD?

Forum

What causes a disabled user in Okta to be moved to a different OU in AD?

Forum

What causes a disabled user in Okta to be moved to a different OU in AD?

Forum

What Happens when I turn off an MFA type?

Loading

What needs to happen in Okta when you rename an OU in AD?