Set first time password on AD account from Okta when Delegate authentication is setup

We have Okta-AD integration setup with “Delegated Authentication” enabled. We are creating new users in Okta from HR source. As part of Joiner flow, we provision AD account through Okta. For Okta-AD integration, how we can set first time password for user account in AD?

Please let me know if you have any inputs/suggestions on this!

What is your current issue? Have you tried to implement this architecture?

@phi1ipp - yes, we have implemented this at POC level. We are able to create AD account from Okta, however first time password is not synched or created in AD from Okta through Okta workflow as “Synchronize Password” option is disabled and “delegated authentication” password is enabled.

How we can setup first time password for user in AD through Okta and how we can share that password securely with user, through this architecture keeping “Synchronize Password” option is disabled and “delegated authentication” password is enabled.

I don’t think it’ll be possible. You would need to have something on-prem to set the password and email it to whoever needs to be aware of it

Yeah, we also concluded the same. This process has to be external to Okta as we have not enabled “Sync password” on AD integration.

Thank you @phi1ipp for your quick response and insights on this. Appreciate it!