<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y000064yUdISAUOkta Classic EngineAdministrationAnswered2024-04-16T10:37:39.000Z2019-03-22T13:57:24.000Z2019-07-09T14:28:13.000Z
  • 1fj3q (1fj3q)

    Thanks Molly!

    Our accounts are AD Administered. Sync between between AD and UD happens regularly and JIT is also turned ON. Accounts when created initially in AD do have the password. I'm trying to understand when and how the accounts get transitioned to "Pending user action". Do user transition to "Pending user action" Status happen only when the password don't match between AD and UD?

    Expand Post
  • Hello Sandeep.

     

    JIT users will never end up in this status, and that is because as soon as they authenticate, they have to complete the account creation process / initial setup. And that is to go through creating a Account Recovery Question, selecting a security image and providing other required details, depending on your configuration.

     

    If a user is in the status - "Pending user Action" that means the user was imported in Okta, before they went through JIT. Meaning, that the user has to access their email accounts, find the email was sent by Okta to activate their account, follow the link and complete the initial account setup process.

     

    If you are still encountering issues regarding this matter please go ahead and submit a support ticket and we will be there to help you out!

     

    Regards,

    Adrian Lazar

    Tier 2 Support Engineer.

    Expand Post
  • lr1bg (lr1bg)

    We have around 1000 user's whose accounts are in pending action, And the mails which got triggered to them might have already expired. So is there any way we can trigger activation mails for all of them at once?

  • 1fj3q (1fj3q)

    Thanks for the all response!

     

    As I mentioned in my question, our accounts are AD Administered. As of now activations/registrations of account are handled by existing IAM solution. We are leveraging OKTA mostly for SSO and MFA. Since these are AD administred accounts, OKTA status must be looking at AD attribute(s) to  ​categorize them into Okta Status. I was not able to find this mapping in the OKTA documentation.

    Expand Post
  • EddieB.19577 (Customer)

    Hello,

     

    what does Pending user action. User password selection required mean? ​

This question is closed.
Loading
Pending User Action - Status