LDAP incremental imports and password management

Okta only supports time stamp-based change tracking. To identify changes made since the last import, the agent uses modifyTimestamp. If your directory supports modifyTimestamp, incremental imports work.

This table identifies support for incremental imports by directory type.

Directory

Incremental Import

Active Directory Lightweight Directory Services (AD LDS) Not supported. AD LDS uses usnChanged as the change tracking attribute
OpenDJ Supported
OpenDS Supported
OpenLDAP Supported
Oracle Internet Directory (OID) Supported
IBM Tivoli DS Supported
Sun One LDAP 5.2+, 6.x and 7.x Supported
RadiantOne Directory 7.1 Supported