<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y0000628HaWSAUOkta Classic EngineUniversal DirectoryAnswered2019-03-08T23:33:16.000Z2019-03-07T03:18:17.000Z2019-03-08T23:33:16.000Z

MattY.99440 (Customer) asked a question.

change confirmed users to JIT users

Today we integrated Active directory and imported over 4000 accounts and confirmed them. They are now sitting in a pending activation state. We would like to change the Active Directory integration to JIT and auto-activate at first login. How do we cleanup the users currently confirmed to let JIT work?


  • Hi Matt,

     

    In your scenario, you should be able to Enable JIT for your AD integration from the get go, inside your AD domain Settings > Import and Provisioning

    Enable JIT Provisioning by checking Create and update users on login.

    This should enable the RealTimeSync process that would update AD accounts on initial login and allow authentication for your active users, taking them after a successful domain acc validation, to set their Okta account, security question and any enabled MFA factors.

     

    Best Regards.

    Expand Post
This question is closed.
Loading
change confirmed users to JIT users