https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/582445#M1260 <P>Unfortunately, you can't disable users on Splunk Cloud even as super admin. Local account, you can delete, but not SAML users.&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screen Shot 2022-01-25 at 1.56.47 PM.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/17671i0F737D1EE20E666E/image-size/medium?v=v2&amp;px=400" role="button" title="Screen Shot 2022-01-25 at 1.56.47 PM.png" alt="Screen Shot 2022-01-25 at 1.56.47 PM.png" /></span></P><P>&nbsp;</P> Tue, 25 Jan 2022 20:59:20 GMT ColinJacksonPS 2022-01-25T20:59:20Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/582442#M1258 <P>We use Okta to authenticate and grant access to our Splunk Cloud instance. The groups and roles are already mapped.&nbsp;</P><P>When I have a team member leave the company, we deactivate their Okta account, so in theory, preventing them from accessing any of our apps. The SSO integration is great at creating SAML users on Splunk Cloud, but to get those accounts removed on Splunk Cloud usually requires a Splunk Support ticket and a 3-5 day turnaround. I can't use the Splunk REST API to do it because we're on cloud.&nbsp;<BR /><BR />Does anyone know anything about deprovisioning automagically or getting Splunk Cloud to start working on this?&nbsp;<BR /><BR />Fezzes, Swarm!</P> Tue, 25 Jan 2022 20:49:07 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/582442#M1258 ColinJacksonPS 2022-01-25T20:49:07Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/582443#M1259 <P>One workaround is just disable user on SC until splunk support has removed those.</P> Tue, 25 Jan 2022 20:55:35 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/582443#M1259 isoutamo 2022-01-25T20:55:35Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/582445#M1260 <P>Unfortunately, you can't disable users on Splunk Cloud even as super admin. Local account, you can delete, but not SAML users.&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screen Shot 2022-01-25 at 1.56.47 PM.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/17671i0F737D1EE20E666E/image-size/medium?v=v2&amp;px=400" role="button" title="Screen Shot 2022-01-25 at 1.56.47 PM.png" alt="Screen Shot 2022-01-25 at 1.56.47 PM.png" /></span></P><P>&nbsp;</P> Tue, 25 Jan 2022 20:59:20 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/582445#M1260 ColinJacksonPS 2022-01-25T20:59:20Z https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/740925#M3641 <P>You can refer this link-</P><P><A href="https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/ConfigureSSOOkta#Configure_the_Splunk_platform_to_remove_users_on_Okta" target="_blank">https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/ConfigureSSOOkta#Configure_the_Splunk_platform_to_remove_users_on_Okta</A></P> Wed, 05 Mar 2025 12:41:50 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Okta-Deprovision-Remove-users-from-Splunk-Cloud/m-p/740925#M3641 ankit86 2025-03-05T12:41:50Z