Part of the Okta-AD Integration guide
If password resets are not working in Okta for users imported from AD, check the following:
AD Agent connectivity — Confirm the Okta AD Agent is online and communicating with Okta. In the Okta Admin Console, navigate to Directory → Directory Integrations and check the Agents tab.
AD Agent write permissions — Make sure the Okta AD Agent has Write permissions by confirming the Domain Admin role is assigned to the Windows service account ("OktaService") created during the integration process.
Conditional Access Policy — Confirm the Windows service account ("OktaService") is assigned a Conditional Access Policy that allows MFA bypass when the login attempt originates from one of Okta's IP addresses.
Still having trouble? Create a support ticket and our team will be happy to help.