
2jgyc (2jgyc) asked a question.
We have an Okta/Salesforce integration. I have been finding that the Okta admin user in SF is removing permissions, changing profiles of random SF users.
Why is this happening? Is this happening to other people? How do I fix this?

Hello @2jgyc (2jgyc) Thank you for reacting out to our Community!
This could be because of the Provisioning settings of the Salesforce application. If this is turned on, then when you make a change to a user profile within Okta, this change will be propagated to Salesforce as well. It is best when assigning a user to the app to provide the correct admin/non-admin rights as well, other wise if you just give Admin rights only in Salesforce, when a push from Okta is done, it will remove them. Please also see:
https://help.okta.com/en-us/Content/Topics/Provisioning/Salesforce/sfdc-enable-provisioning.htm
Hope this helps and if this answered your question, please mark this as Best Answer!