Active Directory accounts

Early Access release

View checked out accounts

Resource admins can view which accounts are currently checked out and by whom. If required, they can force a check-in on any accounts. See Checkout.

Configure project settings

Configure the password complexity, enable password rotation schedule, and enable checkout.

On the Okta Privileged Access dashboard, go to Resource Administration > Resource Management.
Select the resource group that contains the project you want to configure.
Click a project that you want to configure.
Go to the Settings tab.

Click Edit. The option is available if the accounts are linked to an app supported by an LCM connector.

Action	Task
Password complexity	Enter the minimum and maximum characters that you want to enforce. Under Password includes, select one or more options to include in the password. Select Exclude certain symbols by specifying which ones to omit. Click Save.
Schedule password rotation	Select Schedule password rotation for, and then complete the following task: Select one of the following options: All accounts that support rotation All accounts except. If you select this option, click the dropdown menu and select one or more accounts to be excluded from password rotation. Only these accounts. If you select this option, click the dropdown menu and select one or more accounts to be included from password rotation. Enter the Quantity, and then select the Unit to set the frequency for password rotation. Click Save.
Checkout	Note: Only Okta Privileged Access security admins can configure this setting. Select Enable checkout for checkbox, and then complete the following task: Select one of the following options: All accounts that support checkout All accounts except. If you select this option, click the dropdown menu and select one or more accounts to be excluded from checkout. Only these accounts. If you select this option, click the dropdown menu and select one or more accounts where checkout will be enabled. Enter Quantity, and then select the Unit to set the maximum checkout time. Click Save.

Action

Task

Password complexity

Schedule password rotation

Select Schedule password rotation for, and then complete the following task:

Select one of the following options:
- All accounts that support rotation
- All accounts except. If you select this option, click the dropdown menu and select one or more accounts to be excluded from password rotation.
- Only these accounts. If you select this option, click the dropdown menu and select one or more accounts to be included from password rotation.
Enter the Quantity, and then select the Unit to set the frequency for password rotation.
Click Save.

Checkout

Note:

Only Okta Privileged Access security admins can configure this setting.

Select Enable checkout for checkbox, and then complete the following task:

Select one of the following options:
- All accounts that support checkout
- All accounts except. If you select this option, click the dropdown menu and select one or more accounts to be excluded from checkout.
- Only these accounts. If you select this option, click the dropdown menu and select one or more accounts where checkout will be enabled.
Enter Quantity, and then select the Unit to set the maximum checkout time.
Click Save.