
경중김.83831 (Customer) asked a question.
Admin Console > Security > General > Organization Security section configured
Username match criteria on sign in : Allow short match
checked can login without domain
question is...
when same login id with multiple domain
example) user1@domain1.com , user1@domain2.com
when login with "user1", whitch account is decide? and why?

check the priority of the AD domain in Okta, which is the first. when it find in the first, it will not find second.
I recommend you only enable that setting if you are confident that the element before the domain is unique. i.e. coming from a single source, or multiple sources when you guarentee it is unique. It may work without that, but you're asking for trouble.
tested some case
checked ad agent log and okta system log
directory integrated
when user are
when login with "user" as id, "password1" as pwd => login as user@domain1.com
when login with "user" as id, "password2" as pwd => login as user@domain2.com
when password is different at each ad,
decide domain by entered password is currect one.
when user are
when login with "user" as id, "password1" as pwd => login fail
when login with "user@domain2.com" as id, "password1" as pwd => login as user@domain1.com
when login with "user" as id, "password2" as pwd => login fail
when login with "user@domain2.com" as id, "password1" as pwd => login as user@domain2.com
when ad password is same (more than 2 ad, i guess),
login fail, ad priority is not work. full match username enter is only way for login
i have to guided to all end-usera
when AD password is different, enter id without domain
when AD password is same, enter id with domain
it was confused