For months, I had been fighting a recurring problem with our OKTA Active Directory integration service account. Multiple times per week – sometimes multiple times per day – the account would lock out, breaking OKTA’s ability to synchronize user information from Active Directory. Each lockout meant manual intervention: unlock the account, reset the password in…
Month: March 2023
OKTA Domain Admin Service Account
Spent countless hours resetting an OKTA AD service account due to it constantly becoming locked out. Ultimately the problem was the OKTA service account was a member of a group that was connected to the Domain Admins group via 3 or 4 nested groups. FINISH THIS STORY HERE.