← Course Home
Okta Certified Administrator · Part I

User Lifecycle Management

29% of the exam — the second-largest domain.

User Lifecycle Management

Module 2: Provisioning

4 sub-topics · this deck covers sub-topic 1 of 4

↑ Module 2 Overview

The Exam Bullet

"Demonstrate knowledge of the different ways that Okta can perform lifecycle management against Apps (e.g., APIs, SCIM, SAML JIT, password sync, Org2Org)"

This bullet names 5 methods — but you've already learned 3 of them in depth elsewhere in this course. This deck is a map back to each one, not a re-lecture.

The 5 Methods

APIs — direct, programmatic account management against Okta's own API surface.

SCIM — Okta's standard provisioning protocol, covered in Module 1 Sub 5: configure which attributes sync, then profiles update automatically.

Already Taught — Go Back If Rusty

SAML JIT — a brand-new user's Okta profile gets created the moment delegated auth succeeds against AD, no import needed.

↳ Full deck: IAM Module 1, Sub 1 (Delegated Authentication)

Password sync — the reverse of delegated auth: Okta pushes ITS password to AD, making Okta the source of truth.

↳ Full deck: IAM Module 4, Sub 2 (Agent High Availability)

Org2Org — connects a source (spoke) Okta org to a target (hub) org for shared authentication and provisioning.

↳ Full deck: IAM Module 2, Sub 4 (Org2Org Use Cases)

The Exam Angle

This bullet tests recognition more than depth — given a scenario, can you name which of the 5 methods fits?

→ "A new AD user logs in for the first time and their Okta profile appears immediately." = SAML JIT, not SCIM.

→ "Okta needs to be the password source of truth, pushing changes to AD." = password sync, not delegated auth.

One Line To Remember

5 lifecycle methods: APIs (direct/programmatic), SCIM (scheduled sync, cloud+on-prem), SAML JIT (login-triggered creation), password sync (Okta→AD, opposite of delegated auth), Org2Org (Okta org to Okta org). Three of these have full decks elsewhere in this course — use the links above if any feel rusty.

Sources: help.okta.com — org2org-integrate.htm · Provisioning_Deprovisioning_Overview.htm (cross-referencing prior modules for JIT/password sync/Org2Org)