
6d7rg (6d7rg) asked a question.
I read that there are 3 options while configuring selective profile push from okta to app which are Apply mapping on user create and update, Apply mapping on user create only and Do not map.
I also read the below statement which is confusing:
Why does it say that okta does not support partial profile push? I expect okta to push only attributes that are marked as Apply mapping on user create and update. But why is is pushing the other 2 types as well.
Sorry if i understood this completely wrong. Can you please throw some light on this.

Can you post the doc link.?
This is the link to the document: https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-about-selective-profile-push.htm
I agree . The documentation is a bit confusing.
However, it mentions "Okta pushes the app user's full profile". So it means profile map defined for the "app".
On create it will push the full app profile map.
For attributes defined for "create and update" it will push those attributes on create and update.
And it won't push attributes not mapped in the app profile map.
I have implemented this and works as per the profile map definition for me.