Configure enhanced group push for Active Directory OUs

When you choose a group in Okta to push to Active DirectoryActive Directory (AD) is a directory service that Microsoft developed for the Windows domain networks. It is included in most Windows Server operating systems as a set of processes and services. Initially, Active Directory was only in charge of centralized domain management. (AD), you must specify the target organizational unit (OUAn acronym of Organizational Unit. Organizational units are Active Directory containers into which you can place users, groups, computers, and other organizational units. It is the smallest scope or unit to which you can assign Group Policy settings or delegate administrative authority.), and pre-select it on the Settings tab of your Active Directory instance.

To pre-select the target OU:

  1. On the Okta AdminAn abbreviation of administrator. This is the individual(s) who have access to the Okta Administrator Dashboard. They control the provisioning and deprovisioning of end users, the assigning of apps, the resetting of passwords, and the overall end user experience. Only administrators have the Administration button on the upper right side of the My Applications page. Console, click Directory > Directory Integrations.
  2. On the Directory Integrations page, click the Active Directory instance.
  3. On the Settings tab, scroll down to the Import and Account Settings section.
  4. On the Group OUs connected to Okta window, chose the appropriate domainA domain is an attribute of an Okta organization. Okta uses a fully-qualified domain name, meaning it always includes the top-level domain (.com, .eu, etc.), but does not include the protocol (https). and container.

To specify a target OU:

  1. In the Admin Console, click Directory > Directory Integrations.

  2. On the Directory Integrations page, click the Active Directory instance.
  3. On the Push GroupsGroups allow you to organize your end users and the apps they can access. Assigning apps to large sets of end users is made easier with groups. tab, select the By name filter.
  4. Click the Push Groups drop-down menu and choose Find Groups by name. The Push Groups by Name page appears.
  5. Scroll down to the Find Group and Push group to the following OU to specify the groups you pre-selected.

Note: You can add users to the Okta-mastered group in Okta or in AD. If you add a user in AD, the next time that you Import Active Directory users into Okta, that user will appear in the Okta group.

Top