Map a Custom Attribute from Active Directory to Okta

Map a custom attribute from Active Directory (AD) to Okta by creating the attribute in the local domain controller schema and configuring the mapping in the Okta Admin Console. This process allows organizations to synchronize custom user data from AD into Okta user profiles.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Microsoft Active Directory (AD)
• Directories
• Universal Directory
• Lifecycle Management

The video below describes how to map a custom attribute from Active Directory to Okta.

What are the steps to map a custom attribute from Active Directory to Okta?

Create a custom attribute in the local domain controller schema, add it to the person class, and configure the attribute mapping in the Okta Admin Console.

1. Access the appropriate domain controller.
2. Launch the Microsoft Management Console (MMC), select Add/Remove Snap-in, choose Active Directory Schema, and click Add.
3. Right-click Attributes and select Create Attribute to create the custom attribute (for example, secondEmail).
4. Add the new attribute to the Person Class by clicking Classes, right-clicking Person, selecting Properties, navigating to the Attributes tab, clicking Add, and selecting the newly created attribute.
5. Add a value to the attribute by navigating to the Active Directory user properties, selecting the Attribute Editor tab, and modifying the newly created attribute.

NOTE: Contact the internal IT department or system administrator for additional assistance performing the domain controller steps.

6. Access the Okta Admin Console, navigate to Directory, select Profile Editor, click Directories, choose the specific Active Directory, and click Profile.
7. Click Add Attribute and then click Refresh Attribute List.
8. Search for the newly created attribute, select it, and add it.
9. Click Mappings and select Active Directory to Okta.
10. Map the newly created Active Directory attribute to the corresponding Okta attribute.
11. Preview the mapping to ensure the value from the domain controller displays correctly, click Save Mappings, and choose either Apply updates now or Don't apply updates.
12. Run a full import from Active Directory to Okta by navigating to Directory, selecting Directory Integrations, choosing the specific Active Directory, clicking the Import tab, selecting Import Now, and choosing Full Import.