<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content

Is It Possible to Use Active Directory Attributes for Okta Group Rules

Okta Classic Engine
Okta Identity Engine
Administration

Overview

This article addresses the following question:


Is it possible to use Active Directory attributes for Okta group rules?

Applies To

  • Lifecycle
  • Group Rules

Solution

Only Okta attributes (user.*) can be used for setting up group rules with expressions.

Using an AD Attribute will return a syntax error similar to the one in the screenshot below:

Loading
Okta Support - Is It Possible to Use Active Directory Attributes for Okta Group Rules