3icv3 (3icv3) asked a question.
How I Can provision a user to different Forests whem the user is created in OKTA?
Hello! I have the following situation
I have 5 forests
I have provisioning enabled for all of them. The question is: How I can create a user jane.doe and provision that user in all the domains? I´m not referring to the assignation, If I associate a group to any directory and assign all the groups to the user, I´m ok. The question is: how I can manage the UPN? for example, when I create the user OKTA enforces to use, for example, jane.doe@abc.com.... how I can assign the another upn´s?
thanks!
Well, I found how to solve this part.
In any directory, I configured the user provisioning to use this format
String.toLowerCase(user.firstName + "." + user.lastName + "@mydomain.com")
And it provides the user in all the domains when I create the user.
Now, when I try to assign a User to an Office 365 app, Okta says cannot because an inmutable id issue since the user exists in more than one directory. No one of these directories are profile masters. Any idea?
Thanks!
Hi Ignacio,
You can either map the ImmutableID from AD > Okta > Office 365 or simply import from Office 365 which will reconcile the ImmutableID.
Thank You,
Razvan Popa