Create Okta Linked Objects and Pass the Attribute to Downstream Applications
Last Updated:
Overview
Administrators can use the linkedObjects function within Okta to establish relationships between users, such as a manager and an employee, and pass these attributes to downstream applications. This process requires Super Admin access, Postman, and an API token to create the linked object schema before managing the attribute in the Okta Admin Console and mapping it to target applications.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- API Call
- Lifecycle Management
Solution
How is the linked object relationship created in the Okta schema?
Create the linked object relationship in the Okta schema by executing an API call using Postman with a Super Admin API token.
- Configure Postman by following the instructions in How to Integrate Postman with Okta and import the Okta Postman Collection.
- Execute the API call to add the attribute to the schema.
How is the linked object managed in the Okta Admin Console?
Manage the linked object attribute in the Okta Admin Console or via an API call after adding it to the schema.
- Okta Admin Console: Navigate to the user profile, locate the new linked object field, select Edit, and add the target user, such as a manager.
- API Call: Execute the following API call to manage the linked object programmatically.
How is the linked object attribute passed to downstream applications?
Pass the linked object attribute to downstream applications by configuring the Okta to application mappings in the Profile Editor.
- Navigate to Directory > Profile Editor in the Okta Admin Console.
- Select the target application.
- Select Mappings and choose the Okta User to App tab.
- Enter the following expression to map the linked object attribute, replacing
emailwith the desired attribute variable.
user.getLinkedObject("Manager").emailNOTE: The email attribute is a variable, and administrators can reference any attribute in this expression. Alternatively, use user.getLinkedObject("Manager").firstName to pass the first name.
