Map Azure Active Directory attributes to Okta attributes
To use Azure Active Directory for user authentication, you need to map Azure Active Directory user attributes to Okta attributes.
- In the Admin Console, go to Directory > Profile Editor.
- In the Search field, enter AAD or the name you assigned to Azure Active Directory when you added it as an identity provider (IdP).
- Click Profile in the Actions column.
- Configure the user mappings:
- Click Mappings and select Configure User mappings.
- Select the <AAD Application Name> to Okta User tab, and in the second drop down for each attribute, select Do not map for all of the attributes except the login attribute.
- Click Save Mappings and Apply updates now.
- Repeat step 4 for any additional custom user mappings that exist for your org.
- In the FILTERS list, select Custom.
- Click the Delete icon for the First Name attribute, and click Delete Attribute.
- Repeat step 7 for the Last Name, Email. and Mobile Phone attributes.
- Click Add Attribute and complete these fields:
- Display name: Enter Email.
- Variable name: Enter email.
- External name: Enter http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress.
- Click Save and Add Another and complete these fields:
- Display name: Enter First Name.
- Variable name: Enter firstName.
- External name: Enter http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname.
- Click Save and Add Another and complete these fields:
- Display name: Enter Last Name.
- Variable name: Enter lastName.
- External name: Enter http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname.
- Click Save and Add Another and complete these fields:
- Display name: Enter UPN.
- Variable name: Enter upn
- External name: Enter http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier.
- Click Save.
- Click Mappings and select Configure User mappings.
- Select the <AAD Application Name> to Okta User tab, and select email for the login and email attributes.
- Optional. Select upn for the nameidentifier attribute.
- Click Save Mappings and Apply updates now.
Next steps