Active Directory updated profile mappings Skip to main content
https://support.okta.com/help/oktaarticledetailpage?childcateg=&id=ka02a000000u90tsas&source=documentation&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fdocumentation%2fknowledge_article%2factive-directory-updated-profile-mappings-1813489450
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Active Directory updated profile mappings
Published: Feb 14, 2018   -   Updated: Jun 22, 2018

 

 

okta-doc-source

Updated AD Profile Mapping options

Note: Orgs created after October 4th (Preview) or October 9th, 2017 (Production) may see slightly different import and provisioning options described in Configure the AD Agent Import and Provisioning. These changes will be rolled out to orgs created before these dates at a later date, which will be announced in the Release Notes.

Setup Wizard changes

Import Change

New Orgs - There is no SAM Account Name + Configurable Suffix option.

Existing Orgs - Has one additional option: SAM Account Name + Configurable Suffix.

Settings Page changes

Import changes

New Orgs

Okta username (login) - There is no SAM Account Name + Configurable Suffix option. Instead, use theCustomoption.

If you wish to use a custom username to sign on to Okta, use the Custom option and the Okta Expression language to map the Okta username format.

After specifying the Okta username format using Okta Expression language you can preview your changes to validate your mapping expression. Enter the name of a user to preview the mapping.ScreenshotAD_UDmapping_settingspg_import_new

Existing Orgs

Okta username (login) -The Custom option supported a legacy expression language which is different than the Okta Expression language. ScreenshotAD_UDmapping_settingspg_import_old

Provisioning Changes

New Orgs - AD username

The None and From Okta username options have been removed. If you wish to use a custom user name to sign on to Okta, use the Custom option and the Okta Expression language to map the Okta username format. After specifying the Okta username format using Okta Expression language you can preview your changes to validate your mapping expression. Enter the name of a user to preview the mapping.ScreenshotAD_UDmapping_provision_ADusername_new

Existing Orgs - AD username

The Custom option supported a legacy expression language which is different than the Okta Expression language.ScreenshotAD_UDmapping_provision_ADusername_old

New Orgs - cn

This option is no longer available on the Profile Editor. You can only change this option on the Settings page.

Existing Orgs - cn

Screenshot AD_UDmapping_cn_old

Top