This article discusses whether it is possible to add or update additional attributes to Active Directory (AD) using the Group Push Mapping API (to update a group email address, for example).
- Group Push Mapping API
- Group Push
- Active Directory
- Okta Identity Engine (OIE)
No, the focus of the Group Push Mapping API is synchronizing group memberships, not managing the broader AD Group attributes.
The Group Push Mapping API is designed to execute the existing Group Push functions as a way of synchronizing user membership. Group Push helps push existing Okta groups and their memberships to provisioning-enabled third-party apps. Active Directory supports Group Linking, which allows linking existing AD groups to Okta Groups. However, Pushed groups are managed from Okta.
Okta does supply APIs to interact with Groups in Active Directory Integrations, but these are limited in scope to Group Members.
