StaceyS.22475 (Hyland Software, Inc.) asked a question.
Hello Okta Community,
I've integrated Workday with my Okta test tenant and am testing the deactivation of Okta users via the Workday real-time sync for termination in Workday. The Workday analyst has been setting the termination date to 1 day prior to see if RTS triggers.
Example: Today's date we are testing (11/21/24) He set the term date for the user to yesterday (11/20/24).
When I check the logs for the the Workday app in Okta, I see the the following for the specific user:
RealTimeSync for user delete was successful
SUCCESS
Remove user's application membership
SUCCESS
Okta has removed the users Workday application membership, however Okta is not deactivating the user's account in Okta.
I have the following configured in Okta:
Under the Workday app integration:
Provisioning -> Integration I have added the Immediate Termination Reasons
Provisioning -> Workday To Okta, I have the following configured under Profile & Lifecycle Sourcing:
+ Allow Workday to source Okta users
+ When a user is deactived in the app - Deactivate
Deactivate on Last Day of work and Timezone aware terminations are NOT selected
Active Directory is set as my primary profile source and Workday is set as my secondary profile source
Workday is configured to send over the inactive status and termination date via the "Get Worker web service" and we also have a custome Okta-FieldOverrideCCW integration system configured in Workday with custome attributes that are being used & mapped.
I'm not seeing any failures in any of the Okta logs. Can someone point me in the right direction to figure out why Okta is not deactivating the user account? Am I supposed to have a separate attribute for termination_date mapped?
Thanks
Hello @StaceyS.22475 (Hyland Software, Inc.) , thank you for contacting Okta Community.
This sounds like a more complex issue than what we can solve here. I've also brought your question to some of our engineers and they agree that in order to identify the cause of the problem and find a solution, it would be best for you to open a ticket. You could provide more details there, including logs and account details, which should not be shared in a public space.
If you have a paid account, you can open a ticket here. If you encounter trouble opening a ticket despite having a paid account and the necessary admin permissions, please contact your Account Executive. They will be able to engage with our support engineers on your behalf.
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Thank You. I will open a support ticket.