Hello, I was wondering if anyone could confirm the correct way to set up the Okta AD integration so I don't overwrite current users. Or, if that's even possible.

I do not want to sync passwords. I just want new users accounts created in a specific AD OU to provision/deprovision and get activation emails accordingly. Right now all users have been getting set up manually. Will the tool overwrite these accounts and reset passwords during import from AD?

I also want to make sure it's only a one way sync. I do not want accounts set up in okta being synced back to our AD.