The following reconfiguration has been identified as part of the preparation needed to perform the upgrade to Okta Identity Engine (OIE).
NOTE: Additional Okta features may need to be reconfigured or disabled to complete the upgrade. The following error is seen when attempting to upgrade to Okta Identity Engine:
FEATURE_ENG_SELF_SERVICE_REGISTRATION_READ_ONLY_BYPASS_PROGRESSIVE_PROFILING
Upgrade Eligibility: Customer Consent Required
Self-Service Registration Read Only attributes have been detected
Writing to read-only attributes is not supported in Okta Identity Engine. These attributes will be removed from the created profile enrollment policy as part of the upgrade; thus will no longer be populated by the user during registration. If you do not know which attributes are impacted, contact support.
- Okta Identity Engine Upgrade
- FEATURE_ENG_SELF_SERVICE_REGISTRATION_READ_ONLY_BYPASS_PROGRESSIVE_PROFILING
The error occurs because the current Self-Service Registration policy configuration includes read-only attributes, which is an unsupported operation in Okta Identity Engine (OIE). These attributes will be removed from the created profile enrollment policy during the upgrade and will no longer be populated by the user during registration.
Perform one of the following to resolve the issue:
-
Convert the attribute to allow a user to "read-write".
-
Implement an alternative method.
If an alternative method is implemented, the ability to use a read-only attribute in Self-Service Registration requires the use of an inline Registration Hook and/or an Account Creation event hook. Either of these triggers can be configured in Okta Workflows.
Use the following high-level steps to prepare a read-only attribute for the Self-Service Registration upgrade:
-
Create a new attribute with Read/Write user access.
-
Replace the current attribute in the Self-Service Registration policy.
-
Create a Registration/Event hook that copies the new Read/Write attribute value to the original read-only attribute.
