diff --git a/elixir/apps/domain/lib/domain/auth/adapters/okta/api_client.ex b/elixir/apps/domain/lib/domain/auth/adapters/okta/api_client.ex
index f96f93bde..b1b08f78f 100644
--- a/elixir/apps/domain/lib/domain/auth/adapters/okta/api_client.ex
+++ b/elixir/apps/domain/lib/domain/auth/adapters/okta/api_client.ex
@@ -105,6 +105,9 @@ defmodule Domain.Auth.Adapters.Okta.APIClient do
     headers = headers ++ [{"Authorization", "Bearer #{api_token}"}]
     request = Finch.build(:get, uri, headers)
 
+    # Crude request throttle, revisit for https://github.com/firezone/firezone/issues/6793
+    :timer.sleep(:timer.seconds(1))
+
     with {:ok, %Finch.Response{headers: headers, body: response, status: status}}
          when status in 200..299 <- Finch.request(request, @pool_name),
          {:ok, list} <- Jason.decode(response) do
diff --git a/elixir/apps/domain/lib/domain/auth/adapters/okta/jobs/sync_directory.ex b/elixir/apps/domain/lib/domain/auth/adapters/okta/jobs/sync_directory.ex
index 4c13e58ee..5693630ca 100644
--- a/elixir/apps/domain/lib/domain/auth/adapters/okta/jobs/sync_directory.ex
+++ b/elixir/apps/domain/lib/domain/auth/adapters/okta/jobs/sync_directory.ex
@@ -1,7 +1,7 @@
 defmodule Domain.Auth.Adapters.Okta.Jobs.SyncDirectory do
   use Domain.Jobs.Job,
     otp_app: :domain,
-    every: :timer.minutes(5),
+    every: :timer.minutes(20),
     executor: Domain.Jobs.Executors.Concurrent
 
   alias Domain.Auth.Adapter.OpenIDConnect.DirectorySync