
MattiasF.35949 (Customer) asked a question.
We are planning on switching from Delegated AD authentication to Okta passwords. Today we have Delegated auth and agentless SSO enabled. Does anyone know if it's possible to add the "Okta AD Password Sync Agent" and have the password sync to Okta before turning off the Delegated Auth? Or is the only options to send an email or use API?

Hello @MattiasF.35949 (Customer) Thank you for reaching out to our community.
Unfortunately this will not be a solution, as Okta AD Password Sync Agent will only push the password to an application that has Password Synchronization on and then the directory password is cached for five days, as per our documentation here:
https://help.okta.com/en/prod/Content/Topics/Directory/Installing_Configuring_Active_Directory_Password_Sync_Agent.htm
We recommend to send a reset e-mail to all users when you disconnect them from Delegated Authentication or use API.