GregH.00578 (Customer) asked a question.
Attribute Inheritance based on Admin that created account
We are using Okta CIAM for an internal customer facing app. Our customers are all organizations & we want to allow them to manage their own users. We have created user groups based on a specific org identifier and related admin groups. admins have the right to create users (including an org ID attribute). A group rule assigns users to the correct User Group based on that attribute (IE: If user.OrgID equals "CompA" Assign to "CompA_User_Group"
I would like to have the individual user assume the OrgID attribute of the Admin that created them. That way, CompA Admins can only create CompA Users.
Is this possible?
Hello @GregH.00578 (Customer) Thank you for reacting out to our Community!
At this time this functionality does not exist in Okta, however you can add a Feature Request on our Idea section, for a chance that this functionality to be added in the future.
https://support.okta.com/help/s/ideas
As a workaround, what you could do is create a custom attribute in Okta with multiple values(one value for each organisation) and set it to required then have these admins select the info for their Organisation when they create an account.
Community members help others by clicking Like or Select as Best on responses. Try it today.