<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z0000AJDtNGCQ1Okta Classic EngineAPI Access ManagementAnswered2025-01-31T17:06:14.000Z2025-01-28T14:15:02.000Z2025-01-31T17:06:14.000Z
Adding custom attribute to Saml Identity Provider profile using Okta API

Hi all,

We have updated our new identity provider profile with new attributes.

However, these new attributes are being added only to newly created identity provider profiles and are missing on the existing ones. I am looking for automatic way (like Okta API) to align all the existing identity profiles with the new attributes.

 

I couldn't find any documentation nor support for doing this. Can you please help and advice what is the best efficient way doing it automatically?


  • MatthewH.10249 (State of Iowa)

    If I'm following you correctly, you have a SAML app for which you added some new attributes to the profile editor and mapping (Okta to App) and you noticed that users assigned to the app prior to this change are missing values for those attributes. I'm not aware and could not locate any documentation that suggest there is an API way to do this. With that said, you can press the "pencil" icon for each user assigned to the SAML app and adjust each missing attribute value. To do this more automatically you could remove each user from the app and add them back or if you are using groups you can do this in mass by removing the group waiting a bit and then assign the group back. If you have SCIM enabled make sure you disable it before to prevent the account from getting deleted/disabled from the service provider.

     

    If you are still not seeing the values, make sure "Apply mapping on user create and update" is set for each missing attribute in your profile editor mapping. https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-about-selective-profile-push.htm https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-user-profile-attributes-main.htm

    Expand Post
    Selected as Best
  • MatthewH.10249 (State of Iowa)

    If I'm following you correctly, you have a SAML app for which you added some new attributes to the profile editor and mapping (Okta to App) and you noticed that users assigned to the app prior to this change are missing values for those attributes. I'm not aware and could not locate any documentation that suggest there is an API way to do this. With that said, you can press the "pencil" icon for each user assigned to the SAML app and adjust each missing attribute value. To do this more automatically you could remove each user from the app and add them back or if you are using groups you can do this in mass by removing the group waiting a bit and then assign the group back. If you have SCIM enabled make sure you disable it before to prevent the account from getting deleted/disabled from the service provider.

     

    If you are still not seeing the values, make sure "Apply mapping on user create and update" is set for each missing attribute in your profile editor mapping. https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-about-selective-profile-push.htm https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-user-profile-attributes-main.htm

    Expand Post
    Selected as Best
This question is closed.
Loading
Adding custom attribute to Saml Identity Provider profile using Okta API