Frequently Asked Questions
Q: How long does the initial sync take?
A: It depends on the number of users in your Okta organization. Users are processed in batches of 100. For most organizations, the initial sync completes within a few minutes.
Q: How quickly do changes in Okta appear in ZenQMS?
A: Changes are synced in real-time via webhooks. Most changes appear in ZenQMS within a few seconds of occurring in Okta.
Q: What happens if I update a user directly in ZenQMS?
A: That change will remain in ZenQMS. However, if the same user is later updated in Okta, the Okta data will overwrite the ZenQMS data for the mapped fields (name, email, title, active status).
Q: Can I re-run the initial sync?
A: Yes. You can redeploy the integration instance to trigger another initial sync.
Q: What happens if the integration is removed?
A: When the integration is deleted, all external_id links between Okta and ZenQMS users are cleared. User accounts in ZenQMS are not deleted or modified otherwise. You can re-deploy the integration later and it will re-link users.
Q: What if a user in Okta is missing required fields?
A: Users without an email, first name, or last name will be skipped during sync. Check the integration logs for details on which users were skipped.
Q: Does this integration delete users from ZenQMS?
A: No. Deactivating or deprovisioning a user in Okta sets them to inactive in ZenQMS. Users are never deleted.
Q: What happens to roles that are not part of a mapping?
A: They are not affected. The integration only manages roles that are explicitly mapped to an Okta group. All other role assignments remain unchanged.
Q: Can I disable the integration temporarily?
A: Yes. You can pause or disable the integration instance. While disabled, no events from Okta will be processed. Re-enable it when you are ready to resume syncing.
Q: What Okta permissions does the integration need?
A: The integration requires three Okta API scopes: okta.users.read (to read user profiles), okta.eventhooks.manage (to create and manage the webhook), and okta.groups.read (to read group memberships for role mapping).
Q: How do I know if the integration is working?
A: Check the execution logs in the integration platform. Each sync event (initial sync, webhook event) is logged with its status, including any errors or skipped users.