User15952561196082436239 (Customer) asked a question.
Okta Inbound federation - Email change on external IdP
Hello,
I am trying to setup a social login/inbound federation flow in OKTA using Google/Git as identity providers.
If the username/email address of a user is changed on an external Identity Provider (IdP) such as Google or GitHub after the user has been created in Okta through inbound federation with that IdP, will Okta associate the new username/email address with the existing user account in Okta automatically.? or would it create new account on Okta?
Please sugest
Hi @User15952561196082436239 (Customer) , Thank you for reaching out to the Okta Community!
It all depends on your configuration and requirements.
Users are matched against the configured attribute, for example the default is “Okta Username” - while on the Google side, the username would be the same as their email. If the email no longer matches the record in Okta, the user could be created as new or simply redirected to the Okta Login screen, again depending on the configuration.
Other attributes could be configured to be updated, if the attribute used to match against does not change and the JIT settings are set up for Profile Sourcing (see the “Update attributes for existing users” under the IPD configuration page).
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
What you missed: new product releases and other announcements