
User1573524638714754949 (Customer) asked a question.
OKTA - AD Usecase
Usecase :
1) A user provisioned to AD from OKTA
2) User got disabled in AD
3) There is some update on this user in OKTA profile
Question - Is this user re-activated in AD? Is this user profile get updated in AD?
Note - Only provisioning features enabled.(No import from AD to OKTA configured)

Hi Venkat,
what is your source of truth here ? are you importing users from CSV file & provisioning is also enabled to AD from OKTA ? If that is the case then user will be enabled again. It all depends on trusted reconciliation & target reconciliation. please elaborate your Use case in terms of source of truth.
agree with sandeep - user will be reactivated and profile gets updated on any changes since i see one way of Provisioning.
Yep, as per above is it AD master/Okta mastered/or CSV as a master?
Reference - https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-about-profile-mastering.htm?cshid=csh-profile-masters
Hello Sandeep,
Here is the user flow for AD provisioning -
HR(Trusted source) --> OKTA --> AD(Only provisioning configured)
Note - These are OKTA mastered users
Now, Unfortunately by mistaken a user got disabled in AD and later some update happened on the user profile in HR. Now, I see his attributes are getting update but not the status. please confirm.
Thanks,
Venkat
Thanks,
Venkat