This article addresses inconsistent behavior with directory functions used in Group Rules and Mappings. This issue is observed in environments with multiple Workday instances. For example, the hasWorkdayUser() function may not return a consistent value.
- Okta Expression Language (OEL)
- Group Rules
- Workday
This behavior occurs when a user is assigned to more than one instance of a Workday integration. Okta cannot effectively leverage directory functions when multiple Workday instances are present because the system is not able to point to a specific Application Profile Variable.
The hasWorkdayUser() function, for example, can only return a consistent true or false value reliably if the user has a single Workday assignment. This is applicable even if the other Workday instances do not have provisioning enabled. If multiple Workday assignments exist, the expression becomes inconsistent.
To correct this behavior, ensure the user is assigned to only one Workday integration instance:
-
Identify the affected user.
-
Navigate to the Applications section of the Admin Console.
-
Review the user's assignments for Workday integrations.
-
Remove the user's assignment from any additional integration instances, ensuring only one assignment remains.
