OAG: Reserved Attribute Names
Dec 23, 2025
Access Gateway
Okta Classic Engine
Okta Identity Engine
Overview
In the Okta Access Gateway (OAG), there are reserved names already in use that cannot be used again.
Applies To
- Okta Access Gateway (OAG)
- Header Attributes
Cause
For the functionality of the product there are reserved names that are used internally. Since a name can only be used once these are available for use.
Solution
A warning is displayed in the web UI when any of these values are shown, as pictured below.
The list of names that are already in use and can not be used is below:
- UserName
- oag_username
- RemoteIP
- RelayDomain
- SESSIONID
- creationTime
- maxInactiveInterval
- maxActiveInterval
- lastAccessedTime
- USER_AGENT
- SourceAuthNType
