
GregH.00578 (Customer) asked a question.
I know that you have to have firstName, lastName, email & uid (maybe SamAccountName) for Okta to import from AD & create a new user.
What happens if you have an existing user & the lastName gets deleted in AD? I see 'Skipped" in the logs and then after 14 days the user got deleted. Is this the default action?

Was the account deleted or just deactivated? By default, Okta doesn't delete user accounts, even if you delete an account in AD. The typical scheduled imports are deltas that only include existing AD accounts, to create new accounts and modify existing accounts in Okta. However, even a full import will merely deactivate an AD-mastered account that is no longer present in the import. I'd be interested to find out how the account got deleted.
the user was deactivated due to being skipped. I have located the AD activity that caused the import to skip (firstName was deleted, causing it to be blank) but that happened several days before the deactivation. Deactivating an account in Okta kicks off a whole stream of offboarding activities. If I can identify an AD issue that could trigger this during the delay period, I can fix it before it causes downstream problems