Primary email different in google apps Skip to main content
https://support.okta.com/help/answers?id=906f0000000dfbfia4&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
German MosqueraGerman Mosquera 

Primary email different in google apps

I am trying to sync from Active Directory to Okta (succeed) and then Okta to Google Apps. The problem is that Google apps has a diferent domain name. The error I get in Okta:

An error occurred while assigning this app.
Automatic provisioning of user User 2 to app Google Apps failed: Failed to create new user. Invalid Input: primary_user_email

This is what I have:

AD login: user@firstdomain.com (match with primary email)
Okta login: user@seconddomain.com (this is not picked up as primary email)
Google App: user@seconddomain.com

Am I doing something wrong or is just not possible to do SSO with different domains?
Best Answer chosen by Niki (Okta, Inc.) 
Raj RayruRaj Rayru (Okta, Inc.)
It is possible to do SSO & Provisioning to google apps with a different domain. You just need to ensure that the Application Username Format is set to do the transformation of the username into the desired format. This is under the "Sign On" settings, or can also be configured in the Okta-->Google mappings under Profile Editor.

All Answers

Raj RayruRaj Rayru (Okta, Inc.)
It is possible to do SSO & Provisioning to google apps with a different domain. You just need to ensure that the Application Username Format is set to do the transformation of the username into the desired format. This is under the "Sign On" settings, or can also be configured in the Okta-->Google mappings under Profile Editor.
This was selected as the best answer
Mariusz KowalskiMariusz Kowalski (Okta, Inc.)
Hi German, looks like Mr Rayru beat us to the punch. What he says is certainly the way you'd do it. If you need specific guidance you can call in or make a ticket and we can set up a screen share for this

Mariusz K
Okta Support