<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y00006WNHoNSAXOkta Classic EngineAdministrationAnswered2026-04-04T09:00:40.000Z2019-08-08T17:31:21.000Z2019-09-23T22:01:09.000Z

asuxg (asuxg) asked a question.

How to clear an attribute for all users?

I'm trying to find the most efficient way to clear our the secondEmail attribute for all existing users. I'm not trying to remove the attribute entirely, just blank it out. I'm not super experienced with APIs, but I've tried using CSV import but it wasn't able to make an existing entry blank. Any thoughts here?

 

Thank you!


  • The only other idea that comes to mind (bear in mind I'm just another Okta admin...) is to set up a "temporary" directory service / profile master and have that service *only* master the secondEmail attribute. Once that is done, you could try what I described above. But depending how many users you have, it may be quicker to just make the secondEmail attribute manually editable and blank it out manually, or dig in and deal with the API.

     

    Good luck!

    Expand Post
    Selected as Best
  • We have done this by manually setting an attribute mapping of "" for the secondEmail attribute in our attribute master, and that was successful.

  • asuxg (asuxg)

    By attribute master do you mean profile master? I've been looking around the control panel and not sure where to add the mapping. Where in the panel are you entering that in?

     

    Thank you!

  • Sorry, I meant the profile editor. Specifically:

    Admin -> Directory -> Profile Editor -> click the "Mappings" button next to whichever app/service is mastering your secondEmail attribute. Assuming you use Workday to master the secondEmail attribute, you'd click Mappings, and in the "Workday to Okta" view, scroll down to the secondEmail attribute.

     

    If you just un-map the attribute, its value won't get blanked out. But if you change the mapping to just empty quotes, it'll map a blank/null value for you once you click "Save Mappings".

    Expand Post
  • asuxg (asuxg)

    Ah I see.

    Currently Okta is the master for all our attributes, and we've been manually importing CSV files from Bob for new users (until we figure out that integration). I tried importing a CSV and using "" in the secondEmail field but it threw errors.

     

    We've solved this for future imports but I think I'll probably have to figure out the API or just do it by hand for our existing users. Any other ideas or am I stuck here?

    Expand Post
  • The only other idea that comes to mind (bear in mind I'm just another Okta admin...) is to set up a "temporary" directory service / profile master and have that service *only* master the secondEmail attribute. Once that is done, you could try what I described above. But depending how many users you have, it may be quicker to just make the secondEmail attribute manually editable and blank it out manually, or dig in and deal with the API.

     

    Good luck!

    Expand Post
    Selected as Best
This question is closed.
Loading
How to clear an attribute for all users?