<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00008SIu5FCATOkta Classic EngineAdministrationAnswered2022-11-29T17:31:43.000Z2022-11-29T16:41:10.000Z2022-11-29T17:31:43.000Z
  • DonF.81354 (Customer)

    While there is nothing natively built-in that does this, I would first direct you to this question:

     

    Password expiry email notification to user

     

    Now that this suggestion has been made, I would build on that by saying that yes, you can certainly (and I would also suggest) building out a Workflow that runs on a schedule and notifies users of an expiring password X number of days in advance.

     

    How I would suggest you do this with Active Directory-mastered users is the following. You could import the following attribute from Active Directory called "pwdLastSet" and assign to a custom Okta attribute of the same or custom name.

     

    From there, you can use that attribute to execute certain logic against it in your Workflow. Say, if you know the password was changed November first and that your password length is 60 days, you could subtract the difference and send an email on say December 15th informing them their password will expire in 15 days. Basically you could evaluate each day from the last time it was changed, do a greater than / less than evaluation, and send an email when your condition is met.

     

    Let me know if you think this might work for you! Thanks!

     

     

    Expand Post
This question is closed.
Loading
Can Okta notify Active Directory synced users of expiring passwords?