How to Map the Active Directory GUID Attribute to the Okta User Profile

Oct 8, 2025

Single Sign-On

Okta Classic Engine

Overview

This article gives readers a concise summary of the process to create a new attribute in the Okta Admin Dashboard.

Applies To

Solution

This video shows how to map the Active Directory GUID attribute to the Okta user profile.

Login to the Okta Admin Dashboard and navigate to Directory > Profile Editor.
Select the Okta User (default) profile.

Profile editor

Create a new attribute by clicking the + Add Attribute button.
Give the attribute the Display name and Variable name a value of "GUID" and click the Save button.

Add attribute

Go back to the Profile Editor page, find the Active Directory user profile, and click on the Mappings button.

Profile editor

On the User Profile Mappings page, ensure that the Active Directory profile is selected and map the newly created "GUID" attribute to the appuser.externalId attribute. This ensures that the Windows GUID is passed to the GUID attribute on the Okta user profile.

mappings

Related References

For more information about the attribute statements feature, see the article How to define and configure SAML attribute statement.