
lbiln (lbiln) asked a question.
Hi all,
can someone please clarify to me what the behaviour is if we change a UPN within AD from FirstnameSurname@domain.com to FirstnameNewSurname@domain.com ?
if we change this UPN, would this automatically change the UPN within the users profile for the applications? meaning it will break access to the applications?
we are trying to implement a process of when someone gets married, their AD UPN and email address will change, but we are not sure if this will break applications integrated within Okta as the app will treat them as a new user.
If these values remain unchanged, will they get rewritten if a force AD sync to Okta gets performed?

Hello @lbiln (lbiln) Thank you for posting on our Community page!
If the UPN/email address will change in AD, this will be propagated to Okta and update the user profile. The user will need to use the new UPN/email for Okta login.
For the application, this update will be pushed only to the applications that have Provisioning and SSO application that use JIT provisioning, normal SSO apps and SWA apps should remain the same.
Beside the Okta login, user should not see any difference or experience any difficulty.
If possible, I would recommend to do a test before doing this with a user.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Ask Us Anything about Workflows now thru 10/31