Manage users

Early Access release

You can add users manually in the portal, assign them apps and groups, and manage their profiles. When you add users using this method, they'll also be added to your realm.

Before you begin

Ensure you're signed in to the portal as super admin, org admin, or partner admin.

Tasks

Add users

  1. Go to Users Add user.

  2. Fill in the following information:

    • User type: Select a user type from the User type list, or use the default setting. See Custom user types in Universal Directory.

    • First name: Enter the user's first name.

    • Last name: Enter the user's last name.

    • Username: Enter the user's username in email format.

    • Primary email: Enter the user's primary email if it's different from their username.

    • Secondary email: Optional. Enter a secondary email to allow the user to access information when their primary email is unavailable.

    • Groups: Optional. Enter the groups to which the user belongs.

    • Activation: Select an activation option.

  3. Click Add user.

Assign users to apps

  1. Go to Users, and then select a user.
  2. On the user's page, click Apps Assign app.
  3. Click the Select app dropdown menu, and then type to search for the app.
  4. Select an app.
  5. Click Assign app.

Unassign users from apps

  1. Go to Users, and then select a user.
  2. On the user's page, click Apps.
  3. On the apps you want to unassign, click Unassign.

Assign users to groups

  1. Go to Users, and then select a user.
  2. On the user's page, click Groups Assign app.
  3. Click the Select group dropdown menu, and then type to search for the group.
  4. Select a group.
  5. Click Assign group.

Unassign users from group

  1. Go to Users, and then select a user.
  2. On the user's page, click Groups.
  3. On the apps you want to unassign, click Unassign.

Edit user attributes

  1. Go to Users, and then select a user.
  2. On the user's page, click Profile.
  3. Click Edit, and update the user details. You can only update username, names, emails, and phone numbers.

Reset authenticators

Enable authenticator reset notification emails for end users. See Authenticator reset notifications for end users.

  1. Go to Users, and then select a user.
  2. Click More actions Reset authenticators.
  3. Optional. Select the Okta Verify checkbox.
  4. Click Reset authenticators.

Reset multifactor authentication

If you need to reset multifactor authentication (MFA) for your end users, you can choose to reset configured factors for one or multiple users.

  1. Go to Users, and then select a user.
  2. Click More actions Reset multifactor.
  3. Optional. Select one or more MFA options.
  4. Click Reset all to reset all MFA.
  5. Click Reset Selected Factors, if you select a specific MFA option.

Clear user sessions

  1. Go to Users, and then select a user.
  2. Click More actions Clear user sessions.
  3. Click Clear Sessions & Revoke Tokens.

Enroll U2F security key

Complete the following steps to register a U2F security key. See Configure the FIDO2 (WebAuthn) authenticator for more information.

  1. Go to Users, and then select a user.
  2. Click More actions Enroll U2F Security Key.
  3. Click Register.

Enroll a Web authentication security key

The FIDO2 (WebAuthn) authenticator lets users authenticate with a security key or a biometric method, such as a fingerprint or face recognition. See Configure the FIDO2 (WebAuthn) authenticator for more information.

  1. Go to Users, and then select a user.
  2. Click More actions Enroll Web Authentication Security Key.
  3. Click Enroll.

Reset or remove password

You can reset or remove a user's password or end all of a user's sessions when resetting passwords.

  1. Go to Users.

  2. Click Reset or remove password. A dialog opens.

  3. Select one of the following options: Send a reset password email, Create a temporary password, or Remove password.

  4. Optional. Select the Sign out user checkbox. When you select this option, the user is signed out of Okta sessions on all devices and browsers.

  5. Click Reset or remove password.

Related topics

Manage the partner admin portal

Manage groups

Manage users