RoyM.25008 (Customer) asked a question.
How to deal with OKTA provisioning to Active Directory and duplicate name
My company is planning to use Successes factor as the HR system (source of truth) and OKTA to provision from there to the Active directory. My question is how do you recommend to deal with users who have the same first and last name and the expectation that the provision will automatically create the user name in AD (with an additional letter to the second on boarding person) since you cannot have duplicate user name in AD.
For example, two users with the name rich abc are joining the company. first user will be created with the login name of richa. what will happen with the second user?
My first thought is: why would you keep an AD username format that is so simple that creating conflicts is so likely? There are several AD username formats possible, some of which would be more likely to produce unique AD names than just firstname + secondname initial: https://help.okta.com/en/prod/Content/Topics/Directory/ad-agent-configure-provisioning.htm
This was a challenge for us too.
We handled the custom username generation in Okta using APIs.