k507d (k507d) asked a question.
In our LDAP environment, email is not a required field. On the Okta User Profile Master, I am unable to uncheck the 'required' checkbox for email. Attempted to use Profile mapping to populate a default email address if it is not populated in LDAP, but receive an error on the user import for JIT provisioning stating "Expected required AD attribute: mail, (Okta attribute: email) to not be null." Is it possible to make email not required on the Okta User Profile? User who does have the email attribute populated in the LDAP directory is being created JIT in Okta as expected.
Note: while the message references AD, this is misleading since there is no AD integration configured in this instance of Okta, only LDAP ingegration is configured.
We had similar issues when we had to import secondary accounts or Service Accounts in Okta. The solution in this case was to use a expression while doing mapping in profile editor. something like if email is null use UPN.