AkhilT.53708 (Customer) asked a question.
Hi Community,
I'm working on provisioning manager information to a SCIM application and need to map the manager's Okta user ID, but I'm running into issues accessing the id property.
My Setup
We have users from two sources:
- Users synced from Active Directory (with AD manager relationships)
- Users created natively in Okta (with Linked Object manager relationships)
The Problem
I can successfully retrieve manager's email and firstName using these expressions:
- ✅ getManagerUser("active_directory").email - Works
- ✅ user.getLinkedObject("manager").email - Works
- ✅ user.getLinkedObject("manager").firstName - Works
However, when I try to access the manager's Okta user ID:
- ❌ user.getLinkedObject("manager").id → Error: "Invalid property id"
- ❌ getManagerUser("active_directory").id → Error: "Invalid property id"
What I Know
For the current user, user.getInternalProperty("id") works to get the Okta user ID. However, I need the equivalent for the manager's Okta user ID.
My Expression Attempt
getManagerUser("active_directory") != null ? getManagerUser("active_directory").id : user.getLinkedObject("manager") != null ? user.getLinkedObject("manager").id : null
Questions
- What is the correct way to access a manager's Okta user ID in attribute mapping expressions?
- What properties are available on objects returned by getManagerUser() and user.getLinkedObject()?
- Is there an alternative approach to provision manager IDs to SCIM applications?
Documentation I've Reviewed
- Manager/Assistant Functions
- Linked Object Function
The documentation shows examples with .email and .firstName but doesn't specify how to access the id property.
Any help would be greatly appreciated!
Hi @AkhilT.53708 (Customer) , Thank you for reaching out to the Okta Community!
I'm not sure this is supported. the user id is not a profile attribute so it can't be pulled with the usual method. I haven't used it in conjunction with a linked object and I don't have one in my environment to test but try using the user.getInternalProperty("id") function - I know this work to pull the specific user's ID but I'm not sure you can use it to pull the user's manager ID.
Maybe something along the lines of:
user.getLinkedObject("manager").getInternalProperty("id")
If that does not work, I recommend reaching out to the dedicated Okta Developer Forum out via devforum.okta.com to take advantage of their expertise.
While we'll do our best to answer all of your questions here, this medium is more inclined towards Okta core products and features (non-custom/developer work).
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Collect them all. Learn a new skill and earn a new Okta Learning badge.
Just released: More Okta Community badges just added
@Mihai N. (Okta, Inc.) Thank you for the suggestion! Unfortunately,
❌ user.getLinkedObject("manager").getInternalProperty("id") doesn't work - that method isn't available on linked objects.
I've already posted on the Developer Forum as you recommended. Thanks for your help!
Maybe try using a workflow to populate the users' managers ID by reading the user, then grabbing the users' manager email, reading the manager, then updating the users profile with the managers id. Not beautiful, but it'll give you what you want and it'll be easy to troubleshoot the mapping.