
OrO.47075 (Customer) asked a question.
Hi,
When ad integration is on, can I add custom profile attributes that are external to ad?
I want to have a custom attribute that is managed entirely in okta - not synced back to ad and not overridden when an ad sync happens. This custom attribute would get updated using the "update user" api and returned as a custom claim in oidc.
Is that possible?
Thanks

Yes that is possible.
You can add that attribute to the Okta profile.
While defining the attribute, set the Master priority to "Inherit From Okta", so it can be updated from Okta UI or APIs.
If you do not map that attribute in AD profile mappings the attribute value will not be propagated to AD.