This article clarifies how to leverage the Rockstar browser extension to export a report based on specific Okta user attributes. The Rockstar browser extension creates an overlay on the Okta dashboard when an administrator accesses the Okta Administration (Admin) application. This tool provides options for pre-programmed Application Programming Interface (API) calls and allows customized API calls via the API Explorer.
- Rockstar
- Users
- Attributes
- API
- Universal Directory
-
Navigate to Directory > People while the Rockstar browser extension is loaded.
-
Click Export Users on the Rockstar user interface (UI).
-
Enter a search query in the provided window.
NOTE: If the export is run with a blank search query, the system downloads all users whose status is not deactivated.
-
Focus the search query on the
userNamevariable under the Profile section.
Query examples for the underlined attributes:search=id eq "<user id>"
search=type.id eq "<type id>"
The ID refers to the Okta user type (Okta user profile). To view this profile, Admins may add it after:
{{org url}}//admin/universaldirectory#okta/{{type.id}}search=profile.firstName eq "Test"
- Searches support the following attribute operators:
|
Operator |
Description |
Behavior |
|---|---|---|
and | Logical AND | The filter is only a match if both expressions are evaluated to true. |
not | Logical NOT | The filter is a match if the expression evaluates to false. |
or | Logical OR | The filter is a match if either expression evaluates to true. |
| Operator | Description | Behavior |
|---|---|---|
eq | equal | The attribute and operand values must be identical for a match. |
ge | greater than or equal | If the attribute value is greater than or equal to the operand value, there is a match. The actual comparison depends on the attribute type. String attribute types are a lexicographical comparison and Date types are a chronological comparison. |
gt | greater than | If the attribute value is greater than operand value, there is a match. The actual comparison depends on the attribute type. String attribute types are a lexicographical comparison and Date types are a chronological comparison. |
le | less than or equal | If the attribute value is less than or equal to the operand value, there is a match. The actual comparison depends on the attribute type. String attribute types are a lexicographical comparison and Date types are a chronological comparison. |
lt | less than | If the attribute value is less than operand value, there is a match. The actual comparison depends on the attribute type. String attribute types are a lexicographical comparison and Date types are a chronological comparison. |
ne | not equal | If the attribute value does not match the operand value, there is a match. |
pr | present (has value) | If the attribute has a non-empty value or if it contains a non-empty node for complex attributes, there is a match. |
sw | starts with | The entire operand value must be a substring of the attribute value that starts at the beginning of the attribute value. This criterion is satisfied if the two strings are identical. |
Example query to export users with a specific subdomain: search=profile.login co "@example.com".
Example query using the and operator: search=profile.firstName eq "Test" and profile.email sw "test".
NOTE: The Rockstar extension appears in the top left corner of the Okta Admin application. This extension is an unofficial tool created and supported by the community, not Okta. If the extension does not work correctly, Okta Support cannot provide troubleshooting. The JavaScript source is available on GitHub to open an issue or a pull request.
