Pass Regular Expression Attributes to an Okta Access Gateway Application

Adding and mapping custom attributes for an Okta Access Gateway (OAG) application requires configuration in the Okta Admin Console and the OAG Admin UI. Administrators must create the attribute in the Profile Editor, map the Okta expression, and configure the OAG application to send the attribute as a header to the legacy application.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Access Gateway (OAG)

How does an administrator pass regular expression attributes to an Okta Access Gateway application?

Configure the custom attribute in the Okta Admin Console, map the Okta expression to the application, and configure the Okta Access Gateway application to send the attribute as a header to the legacy application.

1. In the Okta Admin Console, navigate to Directory > Profile Editor and search for the OAG application.
2. Select Profile to add custom attributes for the application.
3. Select Mappings and choose the Okta to App tab.
4. Enter the Okta expression in the created Okta to App attribute field.
   NOTE: Change the mapping from Apply mapping on create only to Apply mapping on user create and update to ensure Okta pushes values to OAG when changed.
5. Test the expression and output using the Preview field at the bottom of the window.
6. Select Save Mappings, followed by Apply updates now.
7. Sign in to the OAG Admin UI, open the application in edit mode, navigate to the attribute section, and select the + button to add attributes.
8. Change the Data Source to static.
9. Map the incoming value from Okta:

   appuser.<Okta Variable Name>

10. Enter a header name.
11. Change the Data Source from static to Identity Provider (IdP) and select Okay.
12. Repeat steps 7 through 11 for all other attributes.
13. Select Next > Next > Done to save the changes.