<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D5KZ00000hSHDO0A4Okta Classic EngineAdministrationAnswered2025-04-30T17:59:03.000Z2025-04-17T14:05:35.000Z2025-04-30T17:59:03.000Z

GautamA.93196 (Customer) asked a question.

AD Group Name (not DN) to Person Profile

Hi Experts,

 

We have an AD integration where it also pulls user groups as well.

Is there a way we can store only AD Groups by "Name" instead of "DN" of AD Groups.

 

For example, we added one custom attribute "allADgrps" at Okta to store all AD groups but in the mapping - AD to Okta, appuser.memberOf is fetching complete DN of user's group. How to get or map just the Name of AD Group, not DN?

 

Currently it fetches: CN=Wintel_Group,OU=Groups,DC=example,DC=com

Requirement: Wintel_Group

 

Thanks,

Aditya


  • @GautamA.93196 (Customer)​ 

     

    You can leverage workflows for something like this. You can iterate, do string functions against the DN's parse out group names , and add it to multivalued attribute

     

    HTH

    -Bala

    Expand Post
    Selected as Best
  • @GautamA.93196 (Customer)​ 

     

    You can leverage workflows for something like this. You can iterate, do string functions against the DN's parse out group names , and add it to multivalued attribute

     

    HTH

    -Bala

    Expand Post
    Selected as Best
    • GautamA.93196 (Customer)

      Hi Bala

       

      We don't have Okta Workflows at this moment. Do you think if we have any other way out?

       

      Thanks,

      Aditya

      Expand Post
This question is closed.
Loading
AD Group Name (not DN) to Person Profile