This article describes how to hide personal information from users' profiles in ASA.
- Okta Advanced Server Access (ASA)
- Access Okta Admin Console and navigate to the ScaleFT ASA app in question > Sign On tab > Edit and change username format to custom and paste the following: user.getInternalProperty('id') Save.
- Navigate to ScaleFT ASA app Profile: Directory > Profile Editor > ScaleFT ASA app in question > Profile
- Is required to create 2 custom attributes (unixUserName likely already exists, in which case just create formatted attribute):
- Attribute: unixUserName
- Data type: string
- Display name: unixUserName
- Variable name: unixUserName
- External name: unixUserName
- External namespace: urn:scim:schemas:scaleft:user:1.0
- Attribute Length: Between 1 and 255
- Attribute Type: Personal
- Attribute: formatted
- Data type: string
- Display name: formatted
- Variable name: formatted
- External name: name.formatted
- External namespace: urn:ietf:params:scim:schemas:core:2.0:User
- Description: formatted full name
- Attribute Length: Between 1 and 255
- Attribute Type: Personal
- Next, map the attributes, navigate back to the Profile of the ASA app, then click on Mappings > Okta User to <ASA app>
- Copy and paste the below expression in each of the fields: givenName, familyName, and formatted.
- Copy the below expression in the email field (This is a fake email value, but it can be changed to the domain):
- Copy the below expression and paste it in the unixUserName field:
- Next, create a push a TEST group to the ASA app and then assign that group to the app. Make sure the group has at least one member:
- Navigate to the ASA app > Push Groups > Find group by name > Select the group and click Save.
- Next, click on the Assignments tab > Groups > Assign to Group > select the group that was created earlier, and assign.
- Log in to the ASA dashboard and validate that provisioned users are not showing any personal information.
