Configure enhanced group push for Active Directory OUs

When you choose a group in Okta to push to Active Directory (AD), you must specify the target organizational unit (OU), and pre-select it on the Settings tab of your Active Directory instance.

To pre-select the target OU:

  1. In the Admin Console, go to Directory > Directory Integrations.
  2. On the Directory Integrations page, click the Active Directory instance.
  3. On the Settings tab, scroll down to the Import and Account Settings section.
  4. On the Group OUs connected to Okta window, chose the appropriate domain and container.

To specify a target OU:

  1. In the Admin Console, go to Directory > Directory Integrations.

  2. On the Directory Integrations page, click the Active Directory instance.
  3. On the Push Groups tab, select the By name filter.
  4. Click the Push Groups drop-down menu and choose Find Groups by name. The Push Groups by Name page appears.
  5. Scroll down to the Find Group and Push group to the following OU to specify the groups you pre-selected.