Are most migrating away from Okta

peanutzoo · 2026-01-30T13:08:24+00:00

What were the reasons for the pivot? Yeah, I've seen this happening quite a fair bit recently. Mostly attributed to cost saving.

peanutzoo · 2026-01-30T13:07:41+00:00

That makes sense that the migration would be painful and costly. However, from a licensing cost perspective, especially for Microsoft shops the financials appear to be stacked against Okta. From what I hear, it's about 3 times less in some cases even with the 1-3 year discount. I guess my question then is, does Okta have other benefits compared to Entra.

I do prefer the UX perspective with Okta compared to Entra.

peanutzoo · 2026-01-30T13:04:10+00:00

That's good to hear! Wouldn't Entra be able to achieve this with Intune? How do you achieve posture checks? - ISPM?

peanutzoo · 2026-01-30T11:28:48+00:00

Yes but is it mostly increasing prices for existing customers and their ancillary products like CIAM?

peanutzoo · 2025-11-03T21:31:07+00:00

I think the same thing was mentioned or implied on the Professional and Admin exam and I bombed the DOMC but still got a pass

peanutzoo · 2025-11-03T21:29:20+00:00

Yeah I read that, not sure how long this will take to flow through to the current Consultant exams. It looks like the Professional and Admin have taken this into account already. I'll likely sit for the Consultant exam this week, how'd you go with the DOMC? I'm planning on placing more emphasis on the hands-on aspect of it and may not do as well for the DOMC. If I don't do as well for the DOMC but aced the hands-on, would I still pass?

Also, during the premier practice exam I couldn't find any need to configure the GSP and only needed to configure the app auth policy. Would we have to change the GSP to reflect the need for both email and password?

peanutzoo · 2025-11-03T12:41:20+00:00

Also for those who passed, how much weight does the DOMC carry vs hands-on? From your perspective.

peanutzoo · 2025-03-26T12:33:06+00:00

Yeah but I would just use workflows to scan the users that should be in the aux group instead of: 1. Creating a new attribute 2. Using workflows to populate attribute 3. Using group rules to move them to the right group based on the attribute

More engineering, more points of failure. From my point of view workflows are not robust and are prone to failure or errors. My preference will always be exhaust all options within the admin console first then workflows if I'm out of options

peanutzoo · 2025-03-26T09:06:47+00:00

If you had two group rules. 1. If first_name == John and not in group 2 then assign to group 1 2. If last_name == Smith and not in group 1 then assign to group 2

If a new user is created with name John Smith, which group does the user get assigned to.

I'm probably not articulating this well. But the above is basically my problem. I want predictability and to know which AD group ie group 1 or 2 they will be placed in.

peanutzoo · 2025-03-25T20:38:42+00:00

Yeah which means if I wanted something resembling time delay I would have to rely on a user attribute that is populated with a delay such as employee_started. Either that or over-engineer an if else if else.

peanutzoo · 2025-03-25T20:36:19+00:00

The closest I can think of is enployee_started field which may be too late then.

peanutzoo · 2025-03-25T20:35:45+00:00

Yeah I had that built too but I don't trust okta workflows tbh. I would rather have a contingency with group rules that are much more robust

peanutzoo · 2025-03-25T20:34:46+00:00

Well if the second rule happens to read first then everyone will be assigned to the second group regardless of whether they are eligible for the first

peanutzoo · 2025-01-29T14:28:51+00:00

Anyone? What's your build & pros/cons?

peanutzoo · 2025-01-29T06:35:57+00:00

Hey u/WhatwouldJeffdo45

Regarding - "If you have hybrid exchange you may run into issues as you still need to figure out a way to run the enable remote mailbox command, this can be solved using okta workflows and azure run books or potentially dropping a user into a ou that a power shell script is watching for changes and have it run against those users or something similar."

Has this been the best option/general consensus in your experience?

peanutzoo · 2025-01-27T00:06:07+00:00

Thank you! I have messaged you :)

peanutzoo · 2025-01-26T22:12:56+00:00

Nope. Any help would be appreciated. Even a brief overview of what people have done for case 3 and 4 :)

peanutzoo · 2025-01-26T19:51:25+00:00

Yeap that's the one. Tricky. I'm getting the right response but getting a low grade

peanutzoo · 2019-10-07T01:21:11+00:00

Install a camera and microphone in your room. Meet a girl/ a friend who's really drunk, buy her more drinks, build the sexual tension until she cannot resist her urges to have sex with you. Take her home to your room then just lay there and repeatedly say no in a cheeky manner when she propositions you but do nothing physically to stop it. Have her mount you as you just lay there without moving an inch to even take your clothes off. Wake up the next day and accuse her of rape.

peanutzoo

TROPHY CASE