Enable Okta-mastered user Organizational Unit updates

When an Okta-mastered user or a user mastered by a human resources application is added to an Okta group that provisions to Active Directory (AD), the matching AD user is automatically moved to the organizational unit (OU) to which the group provisions. Your organization can provision multiple groups to AD and each of the groups can provision to a different OU. When a user belongs to multiple groups, group priority order determines which OU the user is added. The group priority order is respected when a user is added to a group, and the OU does not always change.

  1. In the Admin Console, go to Directory > Directory Integrations
  2. Click an Active Directory (AD) instance.
  3. Click the Provisioning tab and select To App in the FILTERS list.
  4. Click Edit in the right pane.
  5. Select the Update OU when the group that provisions a user to AD changes check box.
  6. Scroll down and click Save.