ChristianR.60780 (Customer) asked a question.
In the default okta user profile I've added a custom attribute, lets call it haveAccess. I also use Google Worksapce as IdP but I don't map anything from the IdP to this attribute. I just want to set it in Okta using Oktas Core API using the endpoint https://${yourOktaDomain}/api/v1/apps/<appId>/users/<userId>.
Now for the question, I have a SAML application where I have also added the above custom attribute under Directory > Profile Editor > My SAML App and then configured mapping appuser.haveAccess to user.haveAccess in the default okta user profile.
When setting up the mapping between the app and the default user profile I can only select "Apply mapping on user create only". Why isn't "Apply mapping on user create and update" available?
@ChristianR.60780 (Customer) -- Take a look at: https://support.okta.com/help/s/article/create-and-update-no-longer-available-in-okta-attribute-mappings?language=en_US
&&
https://support.okta.com/help/s/article/unable-to-configure-ad-attributes-to-create-and-update?language=en_US
The ability to "source" users appears to be a requirement for create&update.