<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D5WR00001pRnA80AKOkta Classic EngineDirectoriesAnswered2026-06-29T16:54:49.000Z2026-06-29T06:20:12.000Z2026-06-29T16:54:49.000Z

ShoichiroK.00155 (LAC Co., Ltd) asked a question.

Difference in behavior of "Inherit from profile source" in attribute mapping depending on user creation method

[Summary]

I am trying to map a specific attribute value (e.g., Title) from a CSV Directory to Okta. However, I am seeing cases where the mapping succeeds and fails depending on how the user was created. I would like to know the cause of this behavior difference and how to resolve the failing case.

 

[Prerequisites]

  • Both Active Directory (AD) and CSV Directory are integrated with Okta.
  • The Profile Source Priority is set as follows:
  1. CSV Directory
  2. Active Directory

 

[Details]

To map the "Title" attribute from the CSV Directory, I have configured the attribute mapping on the CSV side with "Read/Write" permissions and set it to "Inherit from profile source".

■ Case 1: Success (Reflected in Okta profile)

  • Target User: A user provisioned (imported) from AD to Okta.
  • Source Values: AD side is blank (empty), CSV side is "Manager".
  • Result: The value from the CSV (Priority 1) was successfully reflected in the Okta profile.

■ Case 2: Failure (Not reflected in Okta profile)

  • Target User: A user created directly in Okta (Okta-sourced), and later linked to an account in the CSV Directory.
  • Source Values: CSV side is "Manager".
  • Result: The value from the CSV is not reflected in the Okta profile, and it remains blank.

 

[Questions]

  1. What is the cause of Case 1 succeeding while Case 2 fails? (Does the difference between an Okta-sourced user and a Directory-sourced user affect this behavior?)
  2. For an Okta-sourced user like in Case 2, what settings are required to prioritize and reflect a specific attribute value from the CSV Directory to the Okta profile?

 


  • Paul S. (Okta, Inc.)

    Hello @ShoichiroK.00155 (LAC Co., Ltd)​ Thank you for posting on our Community page!

     

    The core issue is indeed the difference between an Okta-sourced user and a Directory-sourced user.

     

    Here is the breakdown of why this behavior is happening and exactly how to resolve it for your Okta-sourced users.

     

    The difference in behavior comes down to how Okta handles a user's Source of Truth (Master) when evaluating attribute mappings set to "Inherit from profile source".

    • Case 1 (AD-Sourced User) - Success: Because the user was imported from Active Directory, they are an externally sourced user. When Okta sees an externally sourced user, it respects the global Profile Source Priority list you established (1. CSV, 2. AD). Because CSV outranks AD, Okta successfully pulls the "Title" attribute from the CSV Directory.
    • Case 2 (Okta-Sourced User) - Failure: Because the user was created directly in Okta, they are an Okta-sourced user. For these users, Okta itself is the ultimate source of truth. When an attribute is set to "Inherit from profile source", an Okta-sourced user inherently looks to Okta as their master, effectively bypassing and ignoring external Profile Source priorities for that attribute. Even if the CSV Directory is linked later, Okta will not let the CSV overwrite the Okta profile unless explicitly told to do so.

     

    How to fix Case 2

    To force Okta to prioritize the CSV Directory's "Title" attribute for Okta-sourced users, you need to use Attribute-Level Sourcing. This allows you to override the user's master for one specific attribute without changing how the rest of their profile is managed.

    Here are the exact settings required to resolve Case 2:

    Step 1: Configure Attribute-Level Sourcing

    1. In the Okta Admin Console, navigate to Directory > Profile Editor.
    2. Click on Okta in the left menu (or search for the default Okta User profile) and click Profile.
    3. Scroll down to find your Title attribute and click the Information (i) icon next to it.
    4. In the attribute settings window, scroll down to the Source priority section.
    5. Change the selection from Inherit from profile source to Override profile source.
    6. A list of your integrated applications and directories will appear. Click Add Source if the CSV Directory is not already listed.
    7. Drag and drop the CSV Directory to the absolute top of this list (Priority 1).
    8. Click Save Attribute.

    Step 2: Ensure "Update" Mapping is Enabled You must also ensure that Okta is allowed to continuously update this mapping, not just set it upon initial creation.

    1. Still in the Profile Editor, go back to the main list and find your CSV Directory profile.
    2. Click Mappings and select the CSV Directory to Okta User tab.
    3. Locate the mapping for the Title attribute.
    4. On the right side of the mapping, ensure the green arrow is active and the setting is set to Apply mapping on user create and update (the icon with two arrows).
    5. If it is set to "Apply mapping on user create only" (single arrow), click it to change it.
    6. Click Save Mappings.

    Step 3: Trigger a Sync To apply these new rules to existing users immediately:

    1. Go to Directory > Directory Integrations (or wherever your CSV integration is managed).
    2. Run a full Import from the CSV Directory to force Okta to re-evaluate the mappings.

    Once this sync completes, your Okta-sourced users (Case 2) will have their Okta mastery overridden exclusively for the "Title" attribute, and the value of "Manager" will successfully populate from the CSV Directory.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post

Loading
Difference in behavior of "Inherit from profile source" in attribute mapping depending on user creation method