<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z000091N2lDCASOkta Classic EngineAPI Access ManagementAnswered2023-04-06T16:20:35.000Z2023-04-05T17:27:13.000Z2023-04-06T16:20:35.000Z

ChinmayP.96188 (Customer) asked a question.

When does Okta App User status comes as 'Provisioned'?

Hi Folks,

 

I am wondering when does Okta App User status comes as provisioned. Okta API documentation says, A user status comes as provisoned when the user is added to okta but has not accepted the invite yet. I added a user to Okta who has not accepted the invite yet and then I added an application to user. Now when I fetched the API response the Okta user api sent the status of the user is 'Provisoned' . However the Okta App user api (https://developer.okta.com/docs/reference/api/apps/*response-example-31 ) passed the user's application status is 'active'.

 

Can you please help use understand the meanings of different status coming from Okta Application user API


  • Mihai N. (Okta, Inc.)

    Hi @ChinmayP.96188 (Customer)​ , Thank you for reaching out to the Okta Community!

     

    Hopefully the following explanation will clarify things: 

     

    The Okta User Status is not the same as the App User Status although the naming convention for the states might be similar.  

    Okta User Status refers to the state in which a user profile finds itself in the Okta directory.  

    App User Status refers to the state in which a user profile finds itself in relation to the assignment of a particular app. 

     

     

    As per the APPS API documentation: 

     

    "Users assigned to an application for SSO without provisioning features enabled have an ACTIVE status..."

     

     

    When you have the PROVISIONING feature enabled for an app and you are pushing/assigning users to the downstream app from Okta, the following would apply: 

     

     

    " User provisioning in Okta is an asynchronous background job that is triggered during assignment of the user (or indirectly via a group assignment).

    1. User is assigned to an application that has PUSH_NEW_USERS feature enabled.
    • Application user has a STAGED status with no externalId while the background provisioning job is queued.
    1. When the background provisioning job completes successfully, the application user transitions to the PROVISIONED status" 

     

     

    In essence, ACTIVE and PROVISIONED would mean the same thing as far as the user is concerned, but it is a way to determine/differentiate how a user was assigned to an app. 

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

    --------------------------------

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    Expand Post
This question is closed.
Loading
When does Okta App User status comes as 'Provisioned'?