
JenniferH.76671 (Customer) asked a question.
We have JIT enabled and it's causing disabled accounts to get reactivated. I think are techs are logging in to get the computers ready for the next user. We are also using agentless desktop sso. Is there a way to prevent deactivated users from being reactivated or should I just turn JIT off?

Hello @JenniferH.76671 (Customer) Thank you for reacting out to our Community!
For this you can turn off Reactivate account feature from AD, for this please see topic 11 from the doc below:
https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-configure-import.htm
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.
The October issue of the Okta Community is here and packed with tips on certification, how to earn badges, and new releases. Let us help you stay connected.