About user account states

User accounts can be in a variety of states that require administrative action. The state of user accounts is listed in the Status column in the Directory > People page and on an user's profile page. The states are outlined in the table below.

Provisioned and deprovisioned are not user statuses. A provisioned user can be in any of the active states, as well as pending user action. A deprovisioned user is considered deactivated.

Status Cause

Accounts become staged when they are first created, before the activation flow is initiated or if there is some administration action pending.

Pending user action Accounts that are pending user action have been provisioned, but the end user has not provided verification by clicking through the activation email or providing a password.

Accounts become active when

  • You add a user (Add Person) in the Manage users page and you set the user password without requiring email verification.
  • An end user self-registers into your custom app or the Okta Homepage and email verification is not required.
  • You explicitly activate user accounts.
Password Reset

Accounts are in a password reset state when

  • The account requires a password to be set for the first time.
  • End users request a password reset or you initiate one on their behalf.

Password Reset is considered an Active state.

Locked out

Accounts become locked out when the user exceeds the number of login attempts defined in the password policy.

Locked out is considered an Active state.


Accounts are in this state when you explicitly suspend them. Application assignments are unaffected.

Suspended is considered an Inactive state.


Accounts are deactivated when you explicitly deactivate (or deprovision) them. All application assignments are removed.

Deactivated is considered an Inactive state.