<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D5KZ00001WXuox0ADOkta Classic EngineDirectoriesAnswered2025-11-05T15:33:07.000Z2025-10-23T04:59:48.000Z2025-11-05T15:33:07.000Z

GayeongS.71429 (Customer) asked a question.

Why Does 'SAM Account Name' in Okta Username Format Include Domain Suffix?

Hi everyone,

I found the question ad integration username.

I set the Okta username format to 'SAM Account Name' under the AD Integration Provisioning tab.

​But AD users were created with the format '{SamAccountName}@{Domain}', which was not what I expected.

I excepted the usernames to be simply '{SamAccountName}'

then, I changed the Okta username format from 'SAM Account Name' to 'Custom - appuser.samAccountName'

and after that, the usernames were correctly set as '{SamAccountName}'

But I don't understand why selecting 'SAM Account Name' didn't produce the same result..

Could you explain why this happens?

I will wait your responses.

thank you


  • Paul S. (Okta, Inc.)

    Hello @GayeongS.71429 (Customer)​ Thank you for posting on our Community page!

     

    That is expected behaviour when selecting SAM Account Name and not using Custom attribute, as it's stated in our documentation here

    • SAM Account name: Select this option to combine the SAM Account Name and the AD domain to generate the Okta username. For example, if the SAM Account Name is jdoe and the AD domain is mycompany.okta.com, then the Okta username is jdoe@mycompany.okta.com.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best
  • Paul S. (Okta, Inc.)

    Hello @GayeongS.71429 (Customer)​ Thank you for posting on our Community page!

     

    That is expected behaviour when selecting SAM Account Name and not using Custom attribute, as it's stated in our documentation here

    • SAM Account name: Select this option to combine the SAM Account Name and the AD domain to generate the Okta username. For example, if the SAM Account Name is jdoe and the AD domain is mycompany.okta.com, then the Okta username is jdoe@mycompany.okta.com.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best
    • GayeongS.71429 (Customer)

      Hi @Paul Stiniguta (Employee)​ , Thank you for your clear explanation!

      I missed the documentation, I assumed the SAM Account Name without domain would be the excepted result..

      Thank you!!

  • BrandonB.06003 (Customer)

    This is likely because okta username is typically in an email format. but if youre using AD delegated authentication usually you'll find that you can actually enter in the SAM account name, UPN or full SAM name to login to okta after its enabled. So that dropdown is confusing making you think it is only that one thing that works

This question is closed.
Loading
Why Does 'SAM Account Name' in Okta Username Format Include Domain Suffix?