<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7VWUSA3Okta Classic EngineSingle Sign-OnAnswered2024-09-01T09:04:22.000Z2015-10-06T00:03:23.000Z2020-04-09T12:23:12.000Z

  • svcV.75126 (Customer)

    Hi Alan,

     

    I haven't used this for anything other than seeing that it functions but the Okta Expression Language (http://developer.okta.com/docs/api/getting_started/okta_expression_lang.html(http://developer.okta.com/docs/api/getting_started/okta_expression_lang.html)) has a function called getManagerAppUser (http://developer.okta.com/docs/api/getting_started/okta_expression_lang.html#managerassistant-functions(http://developer.okta.com/docs/api/getting_started/okta_expression_lang.html#managerassistant-functions))

     

    In your Universal Directory profile mapping you could use it in one of the following ways (inclusive not limited to i'm sure). 
    1. Extend an application specific user profile and have an okta->app profile mapping 
    2. getManagerAppUser("active_directory", "active_directory").email
     
    • Extend the base okta user profile and have a directory -> okta profile mapping of 
    • getManagerAppUser("active_directory", "active_directory").email
      

    make sure you confirm the application names with your configuration.
    Expand Post

  • Jonathan Winn (Tarmac)

    Hi Alan,

     

    We had pushed Okta for this functionality as it was one of the final missing items to enable Okta to replace Google Apps Directory Sync (GADS).  These were the steps we performed:

     

    In order to start pushing a user's manager and assistant information to Google apps, you need to:

    1. Make sure Manager and Assistant information is being imported from AD for each user.  You only need to add the attributes (manager & assistant) in the Profile editor - no mapping to an Okta user field is needed  

     

    2. Add a mapping between Okta and Google Apps for Manager

    getManagerUser("active_directory").email

     

    3. Add a mapping between Okta and Google Apps for Assistant

    getAssistantUser("active_directory").email

     

    4. After adding these mappings, you can "Reapply Mappings" to have these new mappings apply across all users

     

    Hope that help!

     

    Jonathan

     

    Expand Post

  • 4ynde (4ynde)

    thank you, that did actually help me fix my issue.

  • 5cjpl (5cjpl)

    Hello,

     

    I am getting an error "Error evaluating expression" when running an expression from OKTA to GSuite.

     

    getManagerUser("active_directory").email

     

    Any idea?

     

    Thanks in Advance.

    Expand Post

  • gs3fz (gs3fz)

    I only have the one Active directory and the above expression returns a NULL value, despite the expression preview returning the intended email address! Has anyone experienced a similar issue.

This question is closed.
Loading
Convert AD manager attribute to the manager's email address