Suspend and unsuspend users

Suspending people in your organization changes their account status from Active to Suspended. Suspended users cannot log in to Okta and receive a message indicating they are suspended. The Okta sign in is blocked for apps that support SAMLAn acronym for Security Assertion Markup Language, SAML is an XML-based standard for exchanging authentication and authorization data between an identity provider (IdP) and a service provider (SP). The SAML standard addresses issues unique to the single sign-on (SSO) solution, and defines three roles: the end user, the IDP, and the SP. Here's how SAML works through Okta: SP-initiated flow: the end user requests (principally through a browser) a service from the SP. The SP requests and obtains an identity assertion from the IdP (in this case, Okta). On the basis of this assertion, the SP can decide whether or not to authorize or authenticate the service for the end user. IdP-initiated flow: with Okta as the IdP, an end user goes to the Okta browser and clicks on a chiclet, sending a SAMLResponse to the configured SP. A session is established with the SP, and the end user is authenticated.. AppAn abbreviation of application. Essentially, it is a web-based site used to perform any number of specific tasks, and requires authentication from end users by signing in. and group memberships are maintained for suspended users and are reinstated if the user is subsequently unsuspended.

Unsuspending people changes their account status from Suspended to Active. All app and group memberships are restored.

Suspending people is useful for temporary and contract workers and employees on leaves of absence if you want to pause and later resume access. This state is also useful if an employee leaves but the adminAn abbreviation of administrator. This is the individual(s) who have access to the Okta Administrator Dashboard. They control the provisioning and deprovisioning of end users, the assigning of apps, the resetting of passwords, and the overall end user experience. Only administrators have the Administration button on the upper right side of the My Applications page. wants to review group and app assignments.

To suspend an end user click the Suspend button on a user's page.

A list of all suspended users is available as a filter.

To unsuspend a user, click the Unsuspend button.