RyanS.02640 (Customer) asked a question.
Directory Integration question concerning profile master and attribute mappings
We are looking to have Okta master 10 base attributes of a user profile while the rest are AD mastered. We are looking to create users and modify certain attributes within Okta only but also keeping that availability within Active Directory as well. What are the advantages/disadvantages to this? If Okta were to somehow be down at a particular time, how does this affect changes/updates being made? Will Okta overwrite once back up and online if updates are completed in Active Directory as a downtime option? Are there any use cases similar to what I just described that we can view? Thanks for any and all assistance.
This is Florin from Okta support.
You can check our documentation about attribute-level sourcing:
https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-mastering-main.htm
The attributes that will be inherited from Okta will be pushed to AD one way, even if you modify in AD the attributes the change will not be reflected in the Okta profile attributes.
There is no way that Okta will be down so there is no need for concern, since we're using the Amazon servers.
You can also create a support case if you have any other questions regarding this subject.
Thank you.