This article clarifies how to configure attribute-level sourcing for an Okta user profile. This process is sometimes required to populate the Okta profile with an attribute from a specific application, as per the documentation on attribute-level sourcing.
- Lifecycle Management
- Universal Directory
- Attribute Level Sourcing
To complete attribute-level sourcing, the following tasks must be completed:
-
Make the application the profile source by following these steps:
-
Optionally, enter the application name in the Search field.
-
Click the application name in the list of applications.
-
Click the Provisioning tab.
-
Select To Okta in the Settings list.
-
Scroll to Profile & Lifecycle Sourcing, click Edit, and select the Allow <app> to source Okta users check box.
-
Click OK in the Enable Profile Sourcing dialog box if it appears.
-
Optionally, select what should happen to the user when they are deactivated in the app:
-
Do Nothing: Prevents activity in the app from controlling the user life cycle. This still allows profile source control of attributes and mappings.
-
Deactivate: This default setting allows the user to be automatically deactivated when deactivated in the target app.
-
Suspend: This setting allows the user to be automatically suspended when deactivated in the target app.
-
-
Optionally, select what should happen to a user when they are reactivated in the app:
-
Reactivate suspended Okta users: Allows an admin to choose if a suspended Okta user should be reactivated when they have been reactivated in the app.
-
Reactivate deactivated Okta users: Allows an admin to choose if a deactivated Okta user should be reactivated when they have been reactivated in the app.
-
-
Click Save.
-
Define the attribute profile source by following these steps:
-
When utilizing attribute-level sourcing, the profile source for each attribute can be defined.
-
In the Admin Console, go to Directory > Profile Editor.
-
Optionally, select Okta, Apps, Directories, or Identity Providers in the Filters list to filter the list of apps.
-
Click Profile for the app, directory, or identity provider. (the name of the application).
-
Optionally, select All, Base, or Custom in the Filters list to filter the attribute list.
-
Click the information button in the right pane corresponding to the attribute intended for editing.
-
Select one of these options in the Source priority list:
-
Inherit from profile source: Default. Select this option to make the profile source the attribute source.
-
Inherit from Okta: Select this option to make Okta the attribute source.
-
Override profile source: Select this option and then select a profile source to override the default profile source and make another profile source the attribute source. This option does not disable the app as a profile source.
-
-
Click Save Attribute.
-
Map profile attributes by following these steps:
-
In the Admin Console, go to Directory > Profile Editor.
-
Click Mappings for the app and select Configure User mappings if a list appears.
-
Select the App to Okta User tab in the User Profile Mappings dialog box.
-
Map attributes by scrolling through the attribute mappings and ensuring that the required attributes in the target are mapped. The Okta or app user profile indicates which are required.
-
Use the drop-down to add attributes, or use expressions to add attributes with concatenated or transformed values.
-
Optionally, preview the mapping for a user.
-
Click Save Mappings and Apply updates now.
