Set up user classification

Early Access release

You can assign a user classification during user creation or update existing users from their profile.

Before you begin

• You must be an org admin to assign user classification.

• Configure external IdPs and set up appropriate routing rules for newly created lite users to sign in to Okta. Lite users are required to authenticate with an external IdP.

• Create a realm and generate a Partner Admin Portal.

Assign user classification during user creation

1. In the Admin Console, go to DirectoryPeople.

2. Click Add person.

3. Select a User type list or accept the default. See Custom user types in Universal Directory.

4. Complete these fields. Okta supports 3-byte encoded UTF-8 characters.

   1. First name: Enter the user's first name.

   2. Last name: Enter the user's last name.

   3. Username: Enter the user's username in email format.

   4. Primary email: Enter the user's primary email if it's different from their username.

   5. Secondary email: Optional. Enter a secondary email to allow the user to access information when their primary email is unavailable.

   6. Groups: Optional. Enter the groups to which the user belongs.

   7. Realm: Select a realm or Apply a realm assignment. See Realm assignments for more information. Delegated realm admins can only select realms or create users in realms where they have admin privileges.

   8. Classification: Select Lite user or keep the default Standard user.

   9. Activation: Select an activation option.

5. Click Save or click Save and Add Another.

Convert Standard user to Lite user

1. In the Admin Console, go to DirectoryPeople.

2. Click the edit icon beside Classification: Standard.

3. Click Change.

Convert Lite user to Standard user

1. In the Admin Console, go to DirectoryPeople.

2. Click the edit icon beside Classification: Lite.

3. Click Change.

Related topics

Assign user classification using the API

User classification