The following is a summary of questions and answers from the Okta Workflows community office hours on Thursday, May 29, 2025. I edit questions for clarity. Read past office hours’ questions and answers.

Questions

How do we automatically remove app assignments to individual users after a certain period (e.g., 2 days)? By default, only groups should have access to apps.

The solution could look like this:

List users → List applications assigned to a user → Remove user from application

How do we force users to change their Okta password?

Use the Okta – Custom API Action card with the Expire the Password API endpoint.

How do you recommend we process 7 million users?

You need to segment the users in some way, such as by department, country, or something that will keep processing under the Workflows limits and Okta API limits. The streaming option limit is 1 million records.

Okta Workflows resources

🚀 New to Okta Workflows? The Getting Started with Okta Workflows page has all the resources to help you get started.

📺 Like learning from videos? Watch Okta Workflows videos.

❓Have a question? Ask during community office hours, post on the community forum, or email me.

🙋🏻‍♀️ Want to learn from the community? Join the #okta-workflows channel on the MacAdmins Slack.

📖 Want to learn more about identity automation? Take Workflows training on Okta Learning.