Set up user classification

Early Access release

You can assign a user classification during user creation or update existing users from their profile.

Before you begin

  • You must be an org admin to assign user classification.

  • Configure external IdPs and set up appropriate routing rules for newly created lite users to sign in to Okta. Lite users are required to authenticate with an external IdP.

  • Create a realm and generate a Partner Admin Portal.

Assign user classification during user creation

  1. In the Admin Console, go to Directory > People.

  2. Click Add person.

  3. Select a User type list or accept the default. See Custom user types in Universal Directory.

  4. Complete these fields. Okta supports 3-byte encoded UTF-8 characters.

    1. First name: Enter the user's first name.

    2. Last name: Enter the user's last name.

    3. Username: Enter the user's username in email format.

    4. Primary email: Enter the user's primary email if it's different from their username.

    5. Secondary email: Optional. Enter a secondary email to allow the user to access information when their primary email is unavailable.

    6. Groups: Optional. Enter the groups to which the user belongs.

    7. Realm: Select a realm or Apply a realm assignment. See Realm assignments for more information. Delegated realm admins can only select realms or create users in realms where they have admin privileges.

    8. Classification: Select Lite user or keep the default Standard user.

    9. Activation: Select an activation option.

  5. Click Save or click Save and Add Another.

Convert Standard user to Lite user

  1. In the Admin Console, go to Directory > People.

  2. Click the edit icon beside Classification: Standard.

  3. Click Change.

Convert Lite user to Standard user

  1. In the Admin Console, go to Directory > People.

  2. Click the edit icon beside Classification: Lite.

  3. Click Change.

Related topics

Assign user classification using the API

User classification