
MatthewR.19140 (Customer) asked a question.
To provide context, there is an org2org set up to another okta instance. On the provisioning page of the org2org source app, import groups is turned off. An import now was done on the source app and it pulled all the users of the destination org. Auto confirm is not turned on, so no one was created in the source org, and we believe these can just be cleared out. But it says that there were groups scanned and then "deleted from app". From what we can tell, nothing has changed and no groups were imported. What does this mean exactly? Is this a concern.

Hi @MatthewR.19140 (Customer) , thank you for contacting Okta Community.
In order to find out which groups were deleted, you can use the following query in the System Logs search: eventType eq "group.lifecycle.delete"
As for the event itself, it may have slipped someone's attention. The option to import groups is pre-selected when you first set up provisioning. If an import took place prior to unchecking the box, some groups may have been included in that import. At a later time, when the box was unchecked, another import took place, which found the groups and deleted them following the new setup.
Regards.
--
Ask Us Anything thru 9/3 Okta’s New MFA Requirement for Admin Console Access