qpwck (qpwck) asked a question.
Custom Attribute Sync - On Prem AD -> Okta -> Azure AD/Office365
We have a couple of vendor applications that need to pull specific user attribute data out of Azure AD for automation purposes. The custom attributes are already synchronized from On Prem AD to Okta without issue, but I'm struggling with how to get that data into Office 365 / Azure.
I have reviewed: https://help.okta.com/en/prod/Content/Topics/Apps/Office365/References/map-custom-atrributes.htm
and: https://docs.microsoft.com/en-gb/azure/active-directory/develop/active-directory-schema-extensions
Microsoft's doc makes it look like it is possible with AD Connect, but I haven't figured out a way to do this via Okta. Has anyone been able to do this successfully in the past?
You would need to create the mapping in Okta using the profile editor. Remember to FROM Okta TO O365. I'm assuming the attribute exists in O365 since you mentioned it exists in Azure AD. Let me know if you need more help and I may have a step by step somewhere. In included a screenshot of some custom mappings we've done from AD --> Okta --> O365
It doesn't yet exist in Office 365 / Azure AD; it is currently in On Prem AD and in Okta.
what is the attribute in AzureAD/Office 365 you want to populate?
Looks like I didn't mention it in my original post - I'm looking to create a new attribute in Azure AD that doesn't yet exist, but it does in On prem AD and Okta; from Microsoft's docs, it looks to be possible using Azure AD Connect, but I haven't been able to find good docs on how to create the attribute via Okta.
I 'think' you need to create the custom attribute in AzureAD first then map it over from Okta. I've not done that so I'm only going on what I read.
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/user-flow-add-custom-attributes