Unassign users from applications

Unassign a user from an application when they no longer need it, or they leave your org. When you unassign an app, it is removed from the user's My Apps page. If the user was assigned to the application as a member of a Group, you need to remove the user from the group, or unassign the application from the entire group.

To remove specific entitlements for a user, see Manage user entitlements instead. You can only change entitlements for users if you're subscribed to Okta Identity Governance and you've enabled Governance Engine for the app.

  1. In the Admin Console, go to DirectoryPeople.
  2. Optional. Enter a user's first name, primary email, or username in the search field and then click the Search icon.
  3. Optional. Perform an advanced user search:
    1. Click Advanced Search.
    2. Select a search filter from the Choose field list. You can filter your search results by created or updated date and time, or you can select base or custom attributes to filter your results.
    3. Select a filter option:

      • Starts with: Returns results that start with the specified value.

      • Equals: Returns results that explicitly match the specified value.

      • Contains: Returns results where the attribute field contains the specified value.

        The Contains filter is only available for the firstName, lastName, email, and login attributes. The search term must contain at least three characters.

      • Greater than: Returns results that are greater than the specified value. For text searches, the filter returns results that come alphabetically after the search term.

      • Less than: Returns results that are less than the specified value. For text searches, the filter returns results that come alphabetically before the search term.

    4. Enter a search value in the Value field.
    5. Optional. Click Add filter to add an additional filter and then repeat steps a to d. Click Clear all filters to clear the ones you've already entered.

      Using an overly complex or long search query can result in an error.

    6. Click Search.
  4. Optional. Use the Status menu to filter results by user status.
  5. Click a user name in the Person & Username column.
  6. Click X and OK in the Unassign Application dialog to remove the user's access to the application.