0D5WR0000127Uqk0AEOkta Classic EngineIdentity GovernanceAnswered2025-12-31T17:53:17.000Z2025-12-03T23:31:46.000Z2025-12-31T17:53:17.000Z

Pratula.69048 (Customer) asked a question.

December 3, 2025 at 11:31 PM
For Joiner Flow (HR > Okta > AD) and with Delegated AuthN ON, how can we assign user password in AD for first time login

I have setup a New Joiner flow in Okta based on new user creation event.

HR system > Okta > AD

 

With delegated authentication turned on, we are getting to the point where we have generated the email in Okta and subsequent account is created in AD, but how can we automate the process of generating password and assigning it in AD.

 

Specifically, do we set the password in Okta and then assign the user to AD; or wait for account to be synched in AD and then assign password? TIA!

  • 4 answers
  • 142 views

  • Paul S. (Okta, Inc.)

    Hello @Pratula.69048 (Customer)​ Thank you for posting on our Community page!

     

    The Okta Community Questions forum isn't really meant for in-depth troubleshooting.

    I would recommend to open a ticket with Support, then working with the assigned Technical Support Engineers. They'll be able to access additional tools and resources to help you get to the bottom of it.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best

  • Paul S. (Okta, Inc.)

    Hello @Pratula.69048 (Customer)​ Thank you for posting on our Community page!

     

    The Okta Community Questions forum isn't really meant for in-depth troubleshooting.

    I would recommend to open a ticket with Support, then working with the assigned Technical Support Engineers. They'll be able to access additional tools and resources to help you get to the bottom of it.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best

  • KathyT.73511 (Anthropic Identity)

    When a user is created in AD from Okta, it will create a password. If you use the option to send an email when a user is created, it will send you the password in the email. (it doesn't always work, but that was my experience a long time ago)

     

    You need to make sure the AD password policy and the Okta password policy are the same because if you create a password in Okta and push it to AD, but it doesn't meet the AD password requirements, it will fail.

     

    Also, make sure your AD Service Account has the rights to create users and update the password. I usually set up that account as a Domain Admin to test it and once I know it works, back it of to just what it needs.

    Expand Post

    • Pratula.69048 (Customer)

      Quick follow-up - For a new Okta user:

      1) Do you create and set the password in Okta before pushing it to AD, or

      2) Do you wait for account to be synchronized in AD and then set a temp password,

      3) Or just send the password across as userPassword attribute?

       

      Thank you for your response!!

      Expand Post

  • Pratula.69048 (Customer)

    Quick follow-up - For a new Okta user:

    1) Do you create and set the password in Okta before pushing it to AD, or

    2) Do you wait for account to be synchronized in AD and then set a temp password,

    3) Or just send the password across as userPassword attribute?

     

    Thank you for your response!!

    Expand Post

Recommended content

No recommended content found...