AD Group Application Assignment Frustration Skip to main content
https://support.okta.com/help/answers?id=9062a000000bmgyqaa&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Okta AdminOkta Admin 

AD Group Application Assignment Frustration

We are in the process of an Okta rollout and we would primarily like to use AD groups for application assignment. I keep running into roadblocks with the app assignments as there are multiple attributes in our applications which cant be assigned to a group since there are more than 1 conflicts (e.g we cannot assign our sales group to an application because it needs us to fill out a role, location, and department attribute for the assignment and while the deparment should be static, the role and locations of members in the sales group will change).

Since all apps are different and will have their own attributes we will need to worry about im at a loss as how to architect our groups in AD for Okta app assignment without it being an absolute mess. If anyone has any experience with this I would love to hear suggestions. 

Adrian RahauAdrian Rahau (Okta, Inc.)
Hello,

Thank you for reaching out to Okta Community.
In the profile editor where you define the attribute mappings, use conditions based on group functions to set attribute values accordingly. See here - http://developer.okta.com/docs/api/getting_started/okta_expression_lang.html for more details on the expression language we support from within the product.

Adrian Rahau
Technical Support Engineer | Okta