Where are AD groups created and how must they be managed according to standard practices?

The correct answer is that AD groups are created in Active Directory (AD) and imported into Okta. This approach aligns with standard practices because Active Directory serves as a centralized directory service that manages user accounts and groups, providing essential features such as policy enforcement, security, and authentication.

When AD groups are created in AD, they can be effectively managed within that environment, allowing organizations to leverage existing infrastructure and management workflows. Once these groups are populated with users and configured to reflect organizational needs, they can be imported into Okta. This integration allows Okta to utilize the existing AD groups for provisioning, access management, and other identity services, maintaining synchronization between the two systems.

This method is particularly advantageous because it reduces redundancy, as groups are maintained in one primary location (AD) while still enabling their use in Okta for various applications and services, thereby streamlining the process and enhancing organizational efficiency.