VictorK.52186 (Customer) asked a question.
When the incident happened, I disabled his account on AD, and blocked his access to 365 on the 365 Admin Console. in Okta, I deactivated his account and reset authenticators. He was showing Deactivated in the People page. Now he has a new phone and I need to give him access again.
On AD I Enabled the account and forced Sync to 365. HIs "access blocked" in 365 is gone and now it looks normal. When he tried to log in on office.com he saw "user is not assigned to this application". I realized that his assignment was gone, so I gave him individual access. On the People page I was seeing "Pending user action". I asked him to try again, he saw "you do not have permission to perform the requested action". I was still seeing "pending user action", so I tried different things - I suspended him, activated him, I saw a "reset password and activate" and I chose that, although we don't change our passwords in Okta; our passwords are managed in AD. Now in the people page I see "password expired". I don't know what to do at this point.
Thanks
Hello @VictorK.52186 (Customer) Thank you for posting on our Community page!
It seems like the user account is not properly synced with AD, maybe when the account was reactivated it was somehow disconnected from AD. Have you tried a full import from AD to Okta?
If the account is not properly linked that should fix it.
If it does not, is it possible to remove the user from Okta and re-import him from AD?
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.