<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y00008Qm5VISAZOkta Classic EngineOkta Integration NetworkAnswered2020-06-26T16:14:37.000Z2020-05-07T14:58:37.000Z2020-05-07T20:08:15.000Z

OrO.47075 (Customer) asked a question.

custom attributes with ad integration

Hi,

When ad integration is on, can I add custom profile attributes that are external to ad?

I want to have a custom attribute that is managed entirely in okta - not synced back to ad and not overridden when an ad sync happens. This custom attribute would get updated using the "update user" api and returned as a custom claim in oidc.

Is that possible?

Thanks


  • PritiS.45592 (Customer)

    Yes that is possible.

    You can add that attribute to the Okta profile.

    While defining the attribute, set the Master priority to "Inherit From Okta", so it can be updated from Okta UI or APIs.

    If you do not map that attribute in AD profile mappings the attribute value will not be propagated to AD.

     

    Expand Post
This question is closed.
Loading
custom attributes with ad integration