<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D5KZ00001FvBFR0A3Okta Classic EngineIntegrationsAnswered2025-08-18T18:40:21.000Z2025-08-13T14:28:33.000Z2025-08-18T18:40:21.000Z

EdL.49238 (Customer) asked a question.

August 13, 2025 at 2:28 PM
Unable to mark attribute as optional in profile mapper for Google IdP

I have Google OAuth set up as an external IdP, but when I try to sign in using a Google account that has no last name I get an error which I think is coming from a callback to Okta saying:

Unable to create the user. The following required properties are missing: "lastName".. Please try again later.

/help/servlet/rtaImage?refid=0EMKZ000000xNfk

 

In the profile mappings, I see that the last name attribute is marked as required but the checkbox is not interact-able.

 

/help/servlet/rtaImage?refid=0EMKZ000000xNfp

I am a super admin for this application, so I don't think it's a permission issue. Anyone know how I can update the "Attribute required" setting here?

  • 8 answers
  • 351 views

  • Paul S. (Okta, Inc.)

    Hello @EdL.49238 (Customer)​ Thank you for posting on our Community page!

     

    Okta allows you to disable these and make them not required, however if you can not disable them then this option needs to be enabled by Support.

    If you have a paid service with Okta you can request this to be enabled by opening a case. If you have a free service then these can not be disabled at this time.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Just released: More Okta Community badges just added. 

    Expand Post
    Selected as Best

  • Paul S. (Okta, Inc.)

    Hello @EdL.49238 (Customer)​ Thank you for posting on our Community page!

     

    Okta allows you to disable these and make them not required, however if you can not disable them then this option needs to be enabled by Support.

    If you have a paid service with Okta you can request this to be enabled by opening a case. If you have a free service then these can not be disabled at this time.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Just released: More Okta Community badges just added. 

    Expand Post
    Selected as Best

  • RohitU.50441 (Trevonix)

    You could probably try with custom OIDC connection and see if it works.

  • KathyT.73511 (Anthropic Identity)

    If you are not opposed to having a last name for your users, you could set up a mapping from Google IDP to Okta that sets a last name if the last name is null.

     

    Basically, if Last Name in Google is not blank and not null, then use Last Name from Google. Otherwise put LastName for their last name.

    source.lastName != "" AND source.lastName != null ? source.lastName : "LastName"

    Expand Post

    • EdL.49238 (Customer)

      Oh I didn't know this was possible. Yeah I think this will work out better than what I originally intended. Thank you so much!

      • RohitU.50441 (Trevonix)

        @EdL.49238 (Customer)​ You can try.

        I would be surprised if it works. If it works please do post here.

         

        The screenshot you have provided is forcing last name at the Google IDP profile level, not at Okta level. So mapping something may not be an option.

         

        As suggested by Paul get the feature enabled to make last name optional. Or try custom OIDC and see if last name is optional there.

        Expand Post

      • EdL.49238 (Customer)

        Confirming that it works for me after adding the mapping in the Google OAuth user profile mappings.

         

        Screenshot 2025-08-18 at 1.03.29 PM

This question is closed.
Loading
Unable to mark attribute as optional in profile mapper for Google IdP