Take action on user identities with time-based conditions
Problem: To maintain high quality data, proper data integrity and operational efficiency, take specific actions on user identities based on specific time-based conditions. For example, in the case of user inactivity, trigger a password reset for customers who haven't logged in for 180 days, or notify an admin when a customer remains in a specific state for longer than a prescribed number of days.
Solution: On a regular cadence, query for users who meet a specific condition and perform an action such as a profile update or a send a notification.
Example Applications: Gmail, Office 365 mail, or API-driven email such as SendGrid for sending end user notifications. Okta connector for other actions.
Sample Flow 1
Sample Flow 2
Guidelines and limitations
There is no native Okta API for inactivity or password expiry. Users profiles must be individually retrieved and filtered by the Workflows engine. Workflows system-wide limits may apply. See Learn about Workflows best practices and limits.
There is no connector available to send native Okta emails. To send end user notifications, a third-party email provider must be used.