JeffK.86191 (Customer) asked a question.
Allowing Staged users to set their password on first log on
We currently import new AD users as Staged and let Okta activate them when they log in for the first time. We do this because not all users will actually log into Okta and we do not want to waste licenses.
These new users are given a temporary password and we set their AD account to require 'Change password at next log on'. It is looking like these new users are not able to set their password on first log on to Okta. We are getting the message "Change password not allowed on specified user".
However, if I manually activate them, then they are able to set their password. Is this the intended functionality or is something wrong?
I ran into a similar issue testing a slightly different scenario. I have a staged Okta user, which I then provision to AD (Okta -> AD provisioning). Like you, the new user is able to logon to Okta with the temp password, but we get the 'Change password not allowed on specified user' when they need to change the password in the Okta UI.