DELETEMEP.66394 (Customer) asked a question.
Okta as an LDAP Repository and therefore the mapping of Okta Profile Attributes to LDAP entry Attributes
When a Directory Integration for LDAP has been established and is "80% good enough", how does one further configure that service so that particular fields from the Universal Directory profile entry for a User are mapped to chosen Attributes in the LDAP DIT entry Attributes?
For example, perhaps I want to map Okta's "nickname" to the LDAP "uid" - instead of mapping Primary Email Address to uid.
Is this configurable?
If so, how and where?
Hello @DELETEMEP.66394 (Customer) Thank you for reacting out to our Community!
You should be able to map these as you desire, from the mappings, please see article below:
https://help.okta.com/oie/en-us/Content/Topics/Directory/ldap-agent-map%20LDAP-user-profile%20attributes.htm
Please also see this article that might help:
https://help.okta.com/oie/en-us/Content/Topics/Directory/ldap-agent-manage-integration.htm
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.
Community members help others by clicking Upvote or Select as Best on responses. Try it today.
Perhaps our service is something other than "Identity Engine".
After selecting the LDAP integration of Directory Integrations, there is no Provisioning Tab
There is an [Edit] button in the upper right but the set of editable properties is rudimentary.
In this case you might want to take a look at this doc:
https://help.okta.com/en-us/Content/Topics/Directory/ldap-openldap.htm
https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-map-attributes.htm
Paul,
This is not yet helpful, either.
There is no App in the filterable set of Apps under Profile Editor for the Okta-internal service which provides the LDAP interface to the Okta-internal Universal Directory.
We are not working with an external LDAP service - but are trying to work with Okta through its LDAP proxy service. (Which makes an Okta Universal Directory seem to be an LDAP service to some non-Okta client.)
Where do we specify how the Okta-internal attributes of users within its Okta Universal Directory are mapped to typical LDAP entry attributes?
Not sure why this service is calling me "DELETEME PLEASE". That is not my real name.
Unfortunately for LDAP interface this option is not available. There are no mappings at this time that can be used for this. Please see our doc for LDAP Interface:
https://help.okta.com/en-us/Content/Topics/Directory/LDAP-interface-main.htm
As for the name part, you can modify it from the My Profile section(unde Me section on the top right hand side of the page)