User Guide

User Information / Group Information Synchronized when Linked with Okta

User information synchronized

User information

Property in Okta

Description

User ID

Username

  • Any characters other than single-byte alphanumeric characters, hyphen (-), and period (.) are replaced with an underscore (_), and the portion preceding the @ sign is matched.

  • If the first character is a hyphen (-), the hyphen (-) is replaced with an underscore (_).

  • If there is a duplicate user in the same tenant, the @ sign is replaced with an underscore (_), and the entire value in the Microsoft Entra ID property is matched.

  • If there is a duplicate user even though the portion succeeding the @ sign is included, a random four-digit value is added to avoid duplication.

Email address

mail

Given name

First name

If the value for this property is not specified on Okta and one of the following conditions is met, synchronization may not occur:

  • The users use this service and are not marked as "registered".

  • The users' email addresses do not match between this service and Okta.

Family name

Last name

If the value for this property is not specified on Okta and one of the following conditions is met, synchronization may not occur:

  • The users use this service and are not marked as "registered".

  • The users' email addresses do not match between this service and Okta.

Department

Department

  • If the value for this property is not specified on Okta and one of the following conditions is met, synchronization may not occur:

    • The users use this service and are not marked as "registered".

    • The users' email addresses do not match between this service and Okta.

  • If the value entered for this property exceeds the maximum number of characters, only the portion from the beginning to the maximum is used.

Office Location

Postal Address

If the value entered for this property exceeds the maximum number of characters, only the portion from the beginning to the maximum is used.

  • Of the user information, the items with an initial value set have the following initial values:

    • Reply Email Language

      Initial value: Reply email language in "Tenant Info".

    • Role

      Initial value: General user

    • Password

      Initial value: Not set

User information in Okta that you can add as the target of synchronization

You can also configure user information profiles in Okta that are not included in "User information synchronized" to be automatically synchronized to user optional information.

If user optional information exceeds the maximum number of characters, the portion from the beginning to the maximum of the information is used as the user optional information.

If the value for this property is not specified on Okta and one of the following conditions is met, synchronization may not occur:

  • The users use this service and are not marked as "registered".

  • The users' email addresses do not match between this service and Okta.

Default attributes in Okta that you can configure as the target of synchronization

Okta user profile

Item names in attribute mapping for automatic synchronization with Okta

Remarks

Middle name

user.middleName

Honorific prefix

ser.honorificPrefix

Title

user.title

Display name

user.displayName

If Display name has no value set so far, "user.firstName{single-byte space}user.lastName" is synchronized.

Nickname

user.nickName

Secondary email

user.secondEmail

Mobile phone

user.mobilePhone

Primary phone

user.primaryPhone

Street address

user.streetAddress

City

user.city

State

user.state

Zip code

user.zipCode

Country code

user.countryCode

Preferred language

user.preferredLanguage

Locale

user.locale

If this item has no value set, it is set to "en_US". However, please note that this depends on the Okta specifications and it may change.

Time zone

user.timezone

User type

user.userType

Employee number

user.employeeNumber

Cost center

user.costCenter

Organization

user.organization

Division

user.division

ManagerId

user.managerId

Manager

user.manager

Synchronized Group Information

Group information

Okta group profile

Description

Group name

name

If the value entered for this property exceeds the maximum number of characters, only the portion from the beginning to the maximum is used.

Member users

-

  • Synchronization only updates group information for those users configured to be synchronized with Okta. Group information for those users who are not configured to be synchronized with Okta is not updated.

  • Each initial group ID value is a random character string generated by this service to identify the group.

  • Any group ID on Okta can be changed on this service, since no group ID is synchronized.

  • Group information description specified on Okta is not synchronized to this service.