The purpose of this article is to describe the expected behavior when attempting to locate a user while leveraging the Assign to delegate feature located on the Delegate tab under Directory > People > Okta User.
- Okta Identity Governance
- Adding a delegate
When attempting to locate a user by using the Assign a delegate that contains a non-standard firstName or lastName structure, the user may not be found.
When typing into the Assign a delegate field, an API call will be made to the Okta /users API endpoint with the search parameter. The search can return up to 200 matching records, populating the drop-down menu. The structure of the search is dependent on the character types entered into the field.
The Assign a delegate search field requires exactly three characters for the initial search for the user to occur. Once three characters are typed in, the API call to the /Users endpoint will be made with the following conditions:
(profile.firstName sw "john" OR profile.lastName sw "john") AND ((status lt "SUSPENDED" or status gt "SUSPENDED") AND (status lt "DEPROVISIONED" or status gt "DEPROVISIONED"))
- The user does not have a status of SUSPENDED or DEPROVISIONED.
- The
firstNameorlastNameuser attribute starts with the value typed in.
If a space is included in the typed string of text, the behavior of the search will change to treat the second typed-in character after the space as a lastName.
(profile.firstName sw "john" AND profile.lastName sw "doe") AND ((status lt "SUSPENDED" or status gt "SUSPENDED") AND (status lt "DEPROVISIONED" or status gt "DEPROVISIONED"))
- The user does not have a status of SUSPEND or DEPROVISIONED.
- The firstName attribute starts with the first characters typed in before the space, and the
lastNameattribute starts with the characters typed in after the space.
Some names are unsearchable. Below are some examples of firstName of "john" with/without spaces and lastName of "doe" with/without spaces:
- j ohn d oe > not searchable.
- john d oe > searchable with "john" for
firstNameandlastNamematch, reliable as long as there are less than 200 results. - jo hn d oe > searchable with firstName of "jo " jo space.
- j ohn doe > searchable with
lastNameof "doe". - j ohn do e > not searchable.
