efnlx (efnlx) asked a question.
Cross domain members sync in Okta via an AD group is not working
Hi,
I have 2 domains. Domain A and Domain B. I have an AD group called xyz in Domain A and added the members from the Domain B in the AD group xyz.
In order to acheive SSO for an application, we have added the AD group xyz in Okta. After the full sync, the AD group reflects in Okta but does not reflect any users which were added in Domain B
Please advise.
Note: There is a trust between Domain A and Domain B in AD.
Hi @efnlx (efnlx),
Thank you for posting on the Okta community page!
I have done some research and I would suggest to check the system logs to see if there are any events reported there that could lead to the root cause of the issue since users might not have been imported if they do not have all the required attributes populated in Active Directory.
If the import was performed right after the changes were made in AD, this might have been cause due to a replication issue and trying again might import the users. Also, you could check to see that the OU where the users are located is selected in Okta.
------------------------------------------------------------------------------------------------------------------------------------------------
Community members help others by clicking Like or Select as Best on responses. Try it today.