<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D54z0000AKAJrDCQXOkta Identity EngineAdministrationAnswered2025-03-31T21:18:47.000Z2025-03-10T05:30:27.000Z2025-03-31T21:18:47.000Z

Hui Zhu(.11818 (Customer) asked a question.

March 10, 2025 at 5:30 AM
Okta Identity Engine Automations

Hi,

 

I am loss at this statement "The email automation is performed once on the same user every 30 days." under this URL (https://help.okta.com/oie/en-us/content/topics/automation-hooks/add-automations.htm).

 

Automations created:

1st Automation > Condition: Every Day at 6pm with user inactive for 30 days then Action: send email to the user.

2nd Automation > Condition: Every Day at 6pm with user inactive for 60 days then Action: send email to the user.

3rd Automation > Condition: Every Day at 6pm with user inactive for 87 days then Action: send email to the user.

4th Automation (Final notice) > Condition: Every Day at 6pm with user inactive for 90 days then Action: send email to the user.

 

Will the user workflow be:

 

Workflow A:

Day 30: The user will receive the first email based on 1st Automation.

Day 60: If the user has been inactive for 60 days, they will receive the second email based on 2nd Automation.

Day 87: If the user has been inactive for 87 days, they will receive the third email based on 3rd Automation.

Day 90: If the user has been inactive for 90 days, they will receive the final notice (4th Automation).

 

OR

 

Workflow B:

Day 30: The user will receive the first email based on 1st Automation.

Day 60: If the user has been inactive for 60 days, they will receive both first and second email on the same date.

Day 87: If the user has been inactive for 87 days, they will receive the first, second and third email on the same date.

Day 90: If the user has been inactive for 90 days, they will receive the first, second, third and final notice on the same date.

 

Thank you.

  • 7 answers
  • 273 views

  • Mihai N. (Okta, Inc.)

    Hi @Hui Zhu(.11818 (Customer)​ , Thank you for reaching out to the Okta Community! 

     

    The Automations work independently of each other and have their own Email Template. Based on the example you provided, this means that: 

     

    Day 30: The user will receive the first email based on 1st Automation.

     

    Day 60: If the user has been inactive for 60 days, they will receive both "1st Automation" (due to 30 day recurrence function) and the email for "2nd Automation".

     

    Day 87: If the user has been inactive for 87 days, the user will receive "3rd Automation" email. (no 30 day recurrence applies for previous Automations)

     

    Day 90: If the user has been inactive for 90 days, the user will receive "1st Automation" email due to "30 day recurrence", "2nd Automation" email due to its "30 day recurrence" as well and the "4th Automation" email as it meets its conditions. Total 3 emails.  

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

     

    --

    The new Okta Help Center YouTube channel is your go-to resource for tips, troubleshooting, and best practice videos. Subscribe today.

    Join the Online Discussion for Ask me Anything on March 25, 2025: Identity Threat Protection with Okta AI

    Expand Post
    Selected as Best

  • Mihai N. (Okta, Inc.)

    Hi @Hui Zhu(.11818 (Customer)​ , Thank you for reaching out to the Okta Community! 

     

    The Automations work independently of each other and have their own Email Template. Based on the example you provided, this means that: 

     

    Day 30: The user will receive the first email based on 1st Automation.

     

    Day 60: If the user has been inactive for 60 days, they will receive both "1st Automation" (due to 30 day recurrence function) and the email for "2nd Automation".

     

    Day 87: If the user has been inactive for 87 days, the user will receive "3rd Automation" email. (no 30 day recurrence applies for previous Automations)

     

    Day 90: If the user has been inactive for 90 days, the user will receive "1st Automation" email due to "30 day recurrence", "2nd Automation" email due to its "30 day recurrence" as well and the "4th Automation" email as it meets its conditions. Total 3 emails.  

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

     

    --

    The new Okta Help Center YouTube channel is your go-to resource for tips, troubleshooting, and best practice videos. Subscribe today.

    Join the Online Discussion for Ask me Anything on March 25, 2025: Identity Threat Protection with Okta AI

    Expand Post
    Selected as Best

    • Hui Zhu(.11818 (Customer)

      Hi Mihai,

       

      Thereafter, the user will not receive emails anymore cause the account has been deactivated right?

      Is there a report to see which users are being disabled by this automations?

      • Hui Zhu(.11818 (Customer)

        Hi Mihai,

         

        Additionally, can i confirm again that for Day 87, the user will receive "3rd Automation" email only and not receive 1st Automation (due to 30 day recurrence function)?

      • Mihai N. (Okta, Inc.)

        The user will continue to receive emails for each automation that still applies.

        For user deactivation, you need to set up a separate automation that triggers the user status change.

         

        Also, based on the example you provided , day 87 is not a multiple of "30 days" to trigger any of the other automation's recurrence.

         

        Regards.

        --

        The new Okta Help Center YouTube channel is your go-to resource for tips, troubleshooting, and best practice videos. Subscribe today.

        Join the Online Discussion for Ask me Anything on March 25, 2025: Identity Threat Protection with Okta AI

        Expand Post

      • Hui Zhu(.11818 (Customer)

        Hi Mihai,

         

        The user will continue to receive emails for each automation that still applies.

        • Can i confirm again if the user is already in "Deactivated" status, user will still continue receive emails?

         

        For user deactivation, you need to set up a separate automation that triggers the user status change.

        • Can i have both actions configure at the 4th Automations instead? (example below)

        4th Automation (Final notice) > Condition: Every Day at 6pm with user inactive for 90 days then Action: Send email to the user and Change user lifecycle state in Okta to "Deactivated".

         

        Is there a report to see which users are being disabled by this automations?

         

        Thank you.

        Expand Post

      • Mihai N. (Okta, Inc.)

        Hi @Hui Zhu(.11818 (Customer)​  - "Deactivated" users would not continue to receive email notifications.

        And yes, the Automation should allow you to send an email and change the status of the user.

        As far as a report goes, there is no out-of-the-box report, but you should be able to pull data from the Okta System Logs and correlate events. This article provides some insight.

         

        Regards.

        --

        Help others in the community by liking or hitting Select as Best if this response helped you.

        Level up your Identity security superpowers with Okta Learning.

        Join the Online Discussion for Ask me Anything on March 25, 2025: Identity Threat Protection with Okta AI

        Expand Post
This question is closed.
Loading
Okta Identity Engine Automations