yzfcr (yzfcr) asked a question.
* Only 2 users are affected
* Other users who were assigned the same app are getting deprovisioned in the Druva app just fine.
* For the 2 affected users we get the below notification in OKTA:
" Auto deprovisioning is not available for this app. Please manually deprovision this account in the app. "
* We created a test user and deactivated the user in OKTA and the app was automatically unassigned in OKTA and user was also automatically deprovisioned in the app.
* Activated the 2 affected users back in OKTA, assigned them back to the Druva app.
* Disabled them in OKTA, although the the app was automatically unassigned, the deprovisioning in the Druva app did not work for these users and we get the "Auto deprovisioning is not available for this app. Please manually deprovision this account in the app. "
* Any updates made to these users are also not syncing back to the app, while for the test user it worked fine.
Hi Moshin,
Sergiu from Okta Support here. Usually, when users are assigned to a certain app before provisioning is enabled can lead to this. Okta can only deprovision users that have been initially provisioned through Okta. Would it be possible that these two affected users have been created in the app before it has been integrated with okta (or before provisioning was enabled)? This can be checked by inspecting the user's app assignment (a certain immutable attribute should be there, marked as externalId), attribute which is required in order for Okta to be able to sync updated downstream, and also complete the deprovisioning flow.
https://support.okta.com/help/s/article/User-profile-updates-aren-t-being-pushed-to-the-application-after-we-enabled-provisioning
If additional assistance is required, please feel free to submit a ticket with our support team, so we can investigate and troubleshoot. All the best!