Hi @dac3n (dac3n)​,

Thank you for posting on the Okta community page!

I have done some research on my end and it seems that for the password inline hook, users should sing in with their Okta password to be furtherly imported using the Password Inline hook. Since in your use case, users are AD mastered, I assume that you have delegated authentication turned on in which if it was, the users that were created through imports from Active Directory do not have an actual password in Okta.

I have provided bellow documentations about Password inline hooks in which it includes as well a section entitled "Migration Program plan" that might be helpful to your use case:

• https://developer.okta.com/docs/guides/migrate-to-okta-password-hooks/main/
• https://developer.okta.com/docs/reference/api/users/#create-user-with-password-import-inline-hook
• https://developer.okta.com/docs/reference/password-hook/

To bring users from AD to Okta, the only way would be through imports. You can also select from which OU you want to import users. Another option would be to directly create the users through API directly with Password Import Inline Hook as described in the documentation provided bellow:

• https://developer.okta.com/docs/reference/api/users/#create-user-with-password-import-inline-hook

Additionally, my advice would be to also leverage the Okta Developer forums for this type of questions and take advantage of their expertise.

• https://devforum.okta.com/

I hope the above information is helpful!