Convert AD manager attribute to the manager's email address Skip to main content
https://support.okta.com/help/answers?id=906f0000000blwxiay&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Alan TullisAlan Tullis 

Convert AD manager attribute to the manager's email address

I am looking to take the manager attribute from AD and convert it to the manager's email address. Has anyone attempted to do this before and if so, were you successful? How would you go about doing something like this with universal directory?

thank you
api-workday api-workdayapi-workday api-workday
Hi Alan,

I haven't used this for anything other than seeing that it functions but the Okta Expression Language (http://developer.okta.com/docs/api/getting_started/okta_expression_lang.html) has a function called getManagerAppUser (http://developer.okta.com/docs/api/getting_started/okta_expression_lang.html#managerassistant-functions)

In your Universal Directory profile mapping you could use it in one of the following ways (inclusive not limited to i'm sure).
  1. Extend an application specific user profile and have an okta->app profile mapping
    • getManagerAppUser("active_directory", "active_directory").email
  2. Extend the base okta user profile and have a directory -> okta profile mapping of
    • getManagerAppUser("active_directory", "active_directory").email

make sure you confirm the application names with your configuration.
Jonathan WinnJonathan Winn
Hi Alan,

We had pushed Okta for this functionality as it was one of the final missing items to enable Okta to replace Google Apps Directory Sync (GADS).  These were the steps we performed:

In order to start pushing a user's manager and assistant information to Google apps, you need to:
1. Make sure Manager and Assistant information is being imported from AD for each user.  You only need to add the attributes (manager & assistant) in the Profile editor - no mapping to an Okta user field is needed  

2. Add a mapping between Okta and Google Apps for Manager
getManagerUser("active_directory").email

3. Add a mapping between Okta and Google Apps for Assistant
getAssistantUser("active_directory").email

4. After adding these mappings, you can "Reapply Mappings" to have these new mappings apply across all users

Hope that help!

Jonathan

 
Alan TullisAlan Tullis
thank you, that did actually help me fix my issue.