<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008C3jjLSAROkta Classic EngineIntegrationsAnswered2025-09-08T09:01:02.000Z2017-10-17T21:37:34.000Z2020-11-04T23:57:58.000Z
  • rnpcu (rnpcu)

    Michael,

     

    Not entirely sure if this is accurate, but you can look at the credentials property of the user returned by Get-OktaUser:

      
    1.  $User = Get-OktaUser $User.Credentials.Provider.type
     

    Expand Post
  • Hi Michael!

     

    You will have to use the commands attached by Matthew! Here is an example from the JSON response with some masters as an example:

     

    Okta Mastered user:

     "credentials": {

                "provider": {

                    "type": "OKTA",

                    "name": "OKTA"

     

    AD Mastered user:

            "credentials": {

                "provider": {

                    "type": "ACTIVE_DIRECTORY",

                    "name": "victorsuciu.com"

     

    LDAP Mastered user:

    "credentials": {

                "provider": {

                    "type": "LDAP",

                    "name": "cn=admin,dc=taz,dc=gg"

    Please ensure this information by retrieving a list with all users using GET {{url}}/api/v1/users. For Salesforce mastered user, in my JSON response credentials (type, name) are offered by Okta. If you only have Okta and AD, your report generated with PS script should fine by using the property Matthew attached.

    Expand Post
  • jn3h1 (jn3h1)

    Thanks guys, this was exactly it! 🙂

     

    Example below for posterity:

     

    PS C:\> $oktaUser = Get-Oktauser "[USER1]"

    PS C:\> $oktaUser.Credentials.Provider.type

    OKTA

     

    PS C:\> $oktaUser = Get-Oktauser "[USER2]"

    PS C:\> $oktaUser.Credentials.Provider.type

    ACTIVE_DIRECTORY
    Expand Post
  • EricP.72813 (Customer)

    Note that this only tells you which app is the source of the password. It does not tell you the profile master. For example, you can have an HR system like Workday be the profile master while having AD be the source for the password for the same user. This method would return AD for that user, not Workday.

This question is closed.
Loading
API Mastered Attribute