In some scenarios, editing user profile attributes might be desired, but the attribute appears as uneditable. This article explains why and presents possible solutions.

• User Lifecycle Management
• Universal Directory
• Profile Attributes

There are two main scenarios in which an attribute is not editable:

• If the user profile was imported from an external profile source such as Active Directory (AD), LDAP, a Human Resources Information System (HRIS), or another Identity Provider, the attributes are set to Inherit from the profile source by default, and it will not be possible to edit the attributes in Okta.
• The user profile is deactivated and, therefore, cannot be updated.

Scenario 1

1. To edit an externally sourced attribute, the attribute update must be done in the profile source and then imported into Okta to update the user. If the attribute should no longer be sourced from the external profile source, an Okta admin can follow the steps below to change the profile source:
   1. Navigate to the Okta admin console to Directory > Profile Editor > click the name of the profile to be edited, typically first in the list named User (default).
      
   2. Locate the attribute that needs modification and click the blue i information button to the right of the Attribute Type column.
       
   3. Change the Source Priority to Inherit from Okta.
       

2. There are also a couple of options for those who prefer not to follow the steps above.
   1.  Amend the user details in the HR source application, and then import the user into Okta.
      or
   2. Disconnect the user account from the sourced application within Okta. Then, edit any fields and reconnect the user to the sourced application.

Scenario 2

1. If the Okta User profile is deactivated, the default behavior requires it to be reactivated before changes can be made. If it is necessary to update the same profile, to prevent sending a welcome email, please refer to How to Avoid Sending a Welcome Email to New Users.
      
   
   
2. Alternately, a new feature has been introduced that allows direct updates to deactivated Users in the Okta org. Imports from an external source into Okta still do not update inactive Users, changes are not pushed to downstream apps, and updates do not have a System Log event associated with them. This feature can be enabled with the following steps:
   1. In the Admin Console, go to Directory > People.
   2. Click More Actions > Edit Deactivated User Profile Updates.
       
   3. Click Allow updates to deactivated users. If this feature is enabled, it can be disabled by following the previous steps and clicking Stop updates to deactivated users.
       
   4. Select the deactivated user account to edit and then apply the necessary changes.

Related References

• Define the attribute profile source
• Work with profiles and attributes
• How to Avoid Sending a Welcome Email to New Users
• Edit deactivated user profiles
• Okta System Log Events for Updates to Deactivated Okta User Profiles