DavidV.49559 (Phoenix Contact) asked a question.
User management lifecycle features
I'm looking to get some detailed questions answered about User management features in Okta. I searched the questions here and documentation, but can't seem to find the answers.
1) What does a user recovery look like with Okta? For example, a user is deleted in Okta and I'm not federating another IDP or AD.
2) I'm moving Okta.org domain to new Okta.org domain. Is it possible to migrate users with hashed passwords?
3) I'm migrating from Okta.org to another IDP. Is it possible to export/migrate users with hashed passwords?
Hi David,
For the first question: Once the user is deleted in Okta, it's impossible to recover it. That's why we recommend only deactivating the users, as you might reactivate the users at some point in time.
For the second question : We can't move data between domains, nor users. I'm afraid that password hashes are not exposed and we cannot download or access them as this would be a security risk.
For the third question : Same as for the previous question. This is why AD/LDAP comes in handy, with managing your user base in there and simply connecting your AD instance to a different IdP.
Thanks,
Marius Fulga
Okta Tier 2 Support Engineer