How to disable ad groups sync

kbazp (kbazp) asked a question.

I don't need AD groups in Okta. Is there a way to configure the agent not to sync AD groups and sync only users?

j5v7c (j5v7c)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
In the agent config settings, you can select a single OU where no groups are stored.

NOTE: This will then not synch any groups, and will remove any AD groups that have already been synched to Okta. So If you're using any exisiting AD groups previously synched to perform provisioning and deprovisioning, PLEASE BE VERY CAREFULL.
Expand Post
kbazp (kbazp)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
This is just a work around as the AD sync agent needs to have an optio to sync usernames only w/o AD Groups.
Expand Post
Kristin "Ninja" Baker (Customer)
9 years ago
There are settings to change groups you sync. There's also options to choose which OU's to sync.
Expand Post
kbazp (kbazp)
9 years ago
Thats the whole point. It does not look like there is a way to not to "enable" the sync for Groups. The work around is to "sync" with OU which does not have any groups, but if groups are added into the OU by mistake, the agent would sync these groups.
Expand Post