LDAP incremental imports and password management

Okta only supports time stamp-based change tracking. To identify changes made since the last import, the agent uses modifyTimestamp. If your directory supports modifyTimestamp, incremental imports work.

This table identifies support for incremental imports by directory type.

Directory	Incremental Import
Active Directory Lightweight Directory Services (AD LDS)	Not supported. AD LDS uses usnChanged as the change tracking attribute
OpenDJ	Supported
OpenDS	Supported
OpenLDAP	Supported
Oracle Internet Directory (OID)	Supported
IBM Tivoli DS	Supported
Sun One LDAP 5.2+, 6.x and 7.x	Supported
RadiantOne Directory 7.1	Supported