Guides

When you add a SCIM template app to your development org, it comes with base attributes set by default. Your SCIM implementation's user schema might not support all of these attributes. It is important that you go through the steps below to ensure that the app you're submitting to Okta for review reflects the attributes you support.

Note: The Okta App Analyst team will reject your app submission with a request to update your attributes if you don't confirm these attributes and mappings before you submit your app for review.

Delete Attributes

Before you can delete an attribute, you first need to remove the mapping for that attribute.

A. Remove the mapping

  1. From the Admin Console, open your SCIM app.

  2. Go to the Provisioning tab. Under the SETTINGS section, click To App. Provisioning to App tab

  3. Scroll to the Attribute Mappings section. Look for the attribute that you want to delete and then click X. Attribute Mappings

  4. Click OK to confirm that you want to remove the mapping for the attribute you selected. Remove Mapping

  5. After removing the mapping for the unwanted attributes, click To Okta under the settings section. Provisioning to Okta tab

Repeat Step 3 and 4 until you remove all the mappings for the attributes you want to delete.

B. Delete attributes from your attribute list

  1. After removing all the mappings for the attribute you want to delete, Click To App. Provisioning to App tab

  2. Scroll to the Attribute Mappings section. Click Go to Profile Editor. Attribute Mappings - Profile Editor

  3. In the Profile Editor, scroll down to the attribute list.

  4. Look for the attribute that you want to delete, and click X. Profile Editor - Remove Attribute

  5. Click Delete Attribute to confirm that you want to remove the attribute. Profile Editor - Delete Attribute

Add Attributes

  1. From the Admin Console, open your SCIM app.

  2. Go to the Provisioning tab. Under the SETTINGS section, click To App. Provisioning to App tab

  3. Scroll to the Attribute Mappings section. Click Go to Profile Editor. Attribute Mappings - Profile Editor

  4. In the Profile Editor, click Add Attribute. Profile Editor - Add Attribute Enter the information for the new attribute that you’re adding and then click Save. For example: Profile Editor - Add Attribute Dialog

    Note: The Scope property determines whether the attribute you are adding can be assigned at a group level or just per user. If you would like your admins to be able to assign a value for this attribute at a group level, don't check the User personal checkbox.

  5. After adding an attribute, you can add a mapping for that new attribute.

Map Attributes

  1. From the Admin Console, open your SCIM app.

  2. Go to the Provisioning tab. Under the SETTINGS section, click To App. Provisioning to App tab

  3. Scroll to the Attribute Mappings section. Look for the attribute that you want to update and click Edit. Attribute Mappings - Edit Attribute

  4. In the dialog that appears, there are two drop-down fields. In the first drop-down menu, select Map from Okta Profile. In the second drop-down menu, choose the Okta profile attribute that you would like to map the SCIM attribute from. Click Save. Attributes - Map Attribute

  5. Repeat for all other SCIM attributes where you would like to modify the mapping (from Okta to app).

  6. After updating the mappings from Okta to your app, click To Okta under the settings section. Provisioning to Okta tab

  7. Scroll to the Attribute Mappings section. Look for the attribute that you want to update and click Edit. Attributes - Edit Attribute

  8. In the dialog that appears, there are two drop-down fields. In the first drop-down menu, select Map from {App Name} App Profile. In the second drop-down menu, choose the Okta profile attribute you would like to map the SCIM attribute to. Click Save. Attribute Dialog - Map Attribute

  9. Repeat for all other SCIM attributes that you would like to modify the mapping (from App to Okta).

Attribute support

You only want to include the attributes that you support in your current user schema. To ensure that the attributes are being sent properly to and from Okta:

  1. When assigning a user to the SCIM app you added in your dev org, ensure that all expected attributes are populated for that user.

  2. After the user is pushed to your SCIM app, check that all attributes are populated in your SCIM repository.

  3. If your app supports User Imports, try importing one user from your app. Check the imported user and ensure that the values for supported attributes are reflected in that imported user's account in Okta.

    1. Go to your Admin Console.

    2. Click Directory > People. Admin Dashboard - Directory - People

    3. You should see the list of Okta users for your org. Find the user you just imported and click that user's name.

    4. Once the user account is opened, click Profile. The Profile screen shows you that user's attributes. Check whether the values for the attributes you support were imported properly for this user. User Profile Attributes

      Your Profile Mapping template can always be updated in the future.

      As mentioned in the adding and deleting attributes sections, you can set whether the attribute you are adding is set per user, or for both per user and group. This is set using the Scope attribute. If you want the attribute you are adding to be set strictly per user, you need to check the User personal checkbox for the Scope attribute. If you want to give admins the ability to set the attribute both per user or per group, leave this check box empty.

Next:

Featured Guides