
dcvha (dcvha) asked a question.
We are trying to login with the credentials of a deprovisioned user. I expected to see an error message which says:
"Unable to signin"
However, okta takes the user to the verification screen to send an email verification.
Is this flow expected for archived users?

One of okta’s security is it does not distinguish between good and bad accounts. It does this so noone can ping the service n get user names.