User16380028103511751463 (Customer) asked a question.
We have okta user profile source as "UlitPro" with priority1 and "Active Directory" with priority2. We have alsmot 3k users created in Okta so far with this setting. Now IGA will be deployed in IAM ecosystem and IGA will act as profile source for Okta (with API integration route). How we can make change on Okta profile source mapping to ensure new users are created directly from IGA and existing users are updated through IGA updates.
Existing user profiles are non-editable, as they have been mapped with other application profile source, then how can IGA update those user profile data? Is there anyway to achieve this IGA Okta integration without impacting any existing user profile data and attribute values.
IGA will send all those attributes to Okta which were earlier sourced from other application source mapping.
Hello @User16380028103511751463 (Customer) Thank you for reacting out to our Community!
The user's profile master can be change but changing the priority in the Profile Masters side. Once you have configured IGA to be functional, you will se it as a Profile master and then make it the highest priority. Once you have done this it will make all assigned users to IGA mastered by it.
Please also see our doc:
https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-about-profile-sourcing.htm
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.
Thank you for your inputs. This is possible, however, we have IGA to Okta integration as API token based integration (similar to external source making API call to Okta for updates through OKta API). So, IGA will not show up as application on Okta to make it as source profile and assign priority. In that case, how we can remove existing UltiPro source as profile master in okta and not impact any user data. This is something we are looking at