Integrate a Custom Attribute in an Okta Org2Org Integration
Last Updated:
Overview
Integrating custom attributes in an Okta Integration Network (OIN) Org2Org integration with provisioning enabled requires creating and mapping the attributes in the Hub and Spoke tenants. This configuration ensures specific data transfers correctly from one Okta organization to another. For mapping these attributes via Security Assertion Markup Language (SAML), refer to the Related References section.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Org2Org
- Universal Directory
- Custom Attributes
Solution
How is a custom attribute integrated in an Okta Org2Org integration?
After successfully configuring the Org2Org integration according to the Integrate Okta Org2Org with Okta article, define a custom attribute on the Org2Org integration.
When using System for Cross-domain Identity Management (SCIM), the Org2Org integration updates profiles directly on the Okta user. Create the attribute in the Hub (Destination) tenant by navigating to the Profile Editor, selecting the default user profile, and configuring the new attribute details.
- Navigate to Admin Dashboard > Profile Editor and select the User (default) profile.
- Select Add Attribute.
- Select the attribute type, enter the Display name, Variable name, and External name for the new attribute, and select Save.
The following image displays the Add Attribute configuration window with the Display name, Variable name, and External name fields populated.
Add the attribute in the Spoke (Source) tenant's Org2Org application user schema by refreshing the attribute list in the Profile Editor and saving the new attribute.
- Navigate to the Spoke tenant's Admin Dashboard > Profile Editor, search for the Org2Org application, and select the application name.
- Select Add Attribute.
- Select Refresh Attribute List, select the new attribute from the list, and select Save.
The following image displays the schema attributes list with the newly added attribute selected.
Map the attribute from the Okta profile to the Org2Org application on the Spoke (Source) tenant by accessing the application mappings and selecting the desired value.
- Navigate to Profile Editor and search for the Org2Org application.
- Select Mappings.
- On the Okta to Org2Org tab, select the desired value to map from the Okta user profile to the application user profile.
The following image displays the Okta to Org2Org mapping tab with the custom attribute mapped to the application user profile.
