Okta Overwrites Google Workspace Organizational Unit With Old Values After Enabling Update User Attributes
Last Updated:
Overview
When using group assignments for the Google Workspace application, Okta unintentionally overwrites the Organizational Unit (orgUnitPath) with an old value after an administrator enables the Update User Attributes provisioning feature.
This occurs because Okta previously imported the value from Google Workspace while profile pushes were disabled. Updating the group assignment settings in the Google Workspace application resolves the issue and restores the correct attribute mapping.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Lifecycle Management
- User Profiles
- Google Workspace
Cause
The Google Workspace application previously had API integration enabled with the Update User Attributes option disabled. During this period, Okta imported the Organizational Unit value from Google Workspace and saved it to the user's application profile. This occurs even if an administrator sets the Organizational Unit attribute to Not Mapped. Because Okta imported the attribute rather than mapping it, the value does not display as Set by <the group> in the application profile. Even after an administrator enables Update User Attributes, Okta retains the old imported value and overwrites any changes made directly in Google Workspace during subsequent profile updates.
Solution
How is the Google Workspace Organizational Unit overwrite issue resolved?
To resolve the overwrite issue and restore the correct attribute mapping, update the group assignment settings in the Google Workspace application.
- Go to Applications and select the Google Workspace application.
- Select the Assignments tab.
- Locate the assigned group and select the Edit (pencil) icon.
- Review the assignment settings and select Save after changing something to update the group assignment configuration.
After saving the assignment, the Organizational Unit (orgUnitPath) attribute updates to display as Set by <the group>, and Okta stops overwriting the value with the old imported data.
