This article describes how to prompt users to add a Secondary Email address in their User Profile.

• User Profile

As an Okta Admin, might be optimal to have the users update their user profiles with personal contact information, such as a Secondary Email or Mobile Phone Number, in case a user loses access to their primary email, etc.  Currently, there is not an official feature to prompt a user to update their profile, but there is a method to prompt users upon every login to add information to their user profile. 

This article will detail how to prompt users to add a Secondary Email address in their User Profile (or any other desired information, i.e., a Mobile Phone number):
 

1. Create a webpage hosted somewhere accessible for the users.  This page will need to have instructions on it to prompt the user to go to their Profile page (click their name on their Okta Dashboard to drop down a menu, and click Settings), and add the Secondary Email value.  For instance, the instructions could be something similar to the below:
   
   The User Profile is missing a value for the "Secondary Email" attribute.  To remove this prompt, please navigate to the following on the Okta Dashboard:

   1. Click on the name dropdown at the top of the screen and click Settings:

   2. Under Personal Information, click Edit.

   3. Add a valid Secondary Email address

   4. Click Save.

Host this page somewhere and take note of the URL for later.

1. Create a Bookmark App. Use the URL for the hosted page created above.  For this bookmark app, it is important to check the boxes for Auto Launch Upon Login under the General tab.  This will ensure that the bookmark pops up when the user logs in and does not add a new app to their Okta Dashboard.

2. Create a new group with a name that details the information that should be populated (for example, "No Secondary Email Group").

3. Create a Group Rule. The group rule needs to be configured with the following:

This will add any users that do not have that value populated to the "No Email Group".  Preview with a user known to have no value and a confirmation that the user matches the rule should be received.  If they have a value in the secondEmail attribute, it will display User Doesn't Match Rule.  Save the rule.

4. Before activating the Group Rule, make sure to assign the Bookmark Application created previously to the "No Email Group" group, so all users that do not have a Secondary Email attribute will get assigned the application, and per the settings we configured, will have the app auto launched, so they are prompted to go add the attribute.

5. Activate the rule once the group is assigned to the app.  With the group rule active, once a user has added their secondary email, they will be removed from the group and no longer prompted. 

Use this same method to prompt the users to add other "optional" information, such as a phone number to their user profile.  Simply repeat the steps, replacing the Group Rule attribute with a different profile attribute, and all else should be the same.