9up76 (9up76) asked a question.
Hello Support,
We are offboarding 140 people from Active Directory and Okta yesterday into today. I have confirmed the below message may be preventing us from moving forward with Okta account deactivation. Can you please assist?
"High Number Of App Unassignments In Import From Active Directory - H3B.HOPEAn import into Okta from Active Directory - H3B.HOPE would have removed 120 out of 173 app assignments (69.4%). This exceeds the current limit of 20% for app unassignments during an import. To prevent accidental deactivation of user accounts, we've paused all of your imports.To specify whether these app unassignments are expected behavior, please log in to your Import Monitoring dashboard."
Some users that were disable last night are disabled, but at least 20-40 more need to be disabled and this safety net feature disabled in order to process the offboards.
Hi @9up76 (9up76) , Thank you for reaching out to the Okta Community!
You can temporarily disable the Import Safeguard by going to your Okta Admin Dashboard → Directories → Directory Integration → <desired AD domain> → Provisioning → Settings/To Okta → Import Safeguard.
While doing this, I recommend that you halt any other imports that might be automated until you finish this Offboarding job, so you can prevent any potentially unwanted deactivation caused by them.
You might also have to check the Admin Dashboard for any pending prompt for the import job that was stopped. There might be a notice for you to kill the previous job and run others.
Also check Import Monitoring under Reports.
Once done, remember to re-enable the safeguard.
Reference articles can be found here:
https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-import-safeguard.htm?cshid=csh-eu-import-safeguard
https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-enable-disable-safeguard.htm
https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-view-import-monitoring-dashboard.htm
https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-resolve-import-safeguard.htm
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.