Source Application Does Not Deactivate Okta Super Administrator
Last Updated:
Lifecycle Management
Administration
Identity Governance
Okta Classic Engine
Okta Identity Engine
Overview
Okta does not deactivate a user with the Super Administrator role via an import or Real Time Sync (RTS) when a source application deactivates the user. This occurs because Okta prevents the unintentional deactivation of Super Administrator accounts during an import or RTS process. Remove the Super Administrator role in Okta before deactivating the user in the source application.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Roles
- Provisioning
Cause
Okta prevents the unintentional deactivation of Super Administrator accounts during an import or RTS process.
Solution
What are the methods to deactivate a Super Administrator?
Deactivate a Super Administrator by removing their role before deactivating them in the source application, or by manually deactivating them in Okta.
- Remove the Super Administrator role in Okta for the user before deactivating the user in the source application.
- Manually deactivate the user using another Okta admin account with the Super Administrator role.
