
6tbuy (6tbuy) asked a question.
What is the best practice for deactivated users that are imported from active director? Delete them off of active directory and okta? Don't worry about them?
What is the best practice for empty groups?
Also side question: If delete a user off of active directory does it delete that user from okta? Or would have to manually delete them from both active and OKTA.

Hello @6tbuy (6tbuy)
Thanks for posting.
It depends of the user's source.
If this is an AD sourced user and you delete it on AD, then it will be automatically deleted on Okta, but if this is an Okta mastered user, and you delete it on AD, nothing will happen in Okta.
You can find more details and how to achieve this here:
https://help.okta.com/en/prod/Content/Topics/Directory/ad-agent-manage-users-groups.htm
Let us know if this helps you.
Daniela Chavarria.
Okta Inc.