CODEWITHSUNDEEP
saml-2.0okta
smiggleworth
smiggleworth

Reputation: 644

Okta Saml customize the username returned in the assertion

A client has setup an app to integrate w/ okta using saml 2.0. Everything seems to be working just fine from a communication standpoint, but the username returned from Okta is the login (i.e. "crazypants")

The application is looking for a username in custom format (i.e. "[email protected]")

is there a way in Okta to append "@domain.stuff"

Upvotes: 0

Views: 1150

Answers (1)

Thomas Kirk
Thomas Kirk

Reputation: 191

The custom username is configured under the Applications Sign-On tab.

  1. Navigate to the Admin console, Applications, and select the correct application
  2. Once the application page has loaded, navigate to the "Sign On" tab
  3. Click on "Edit" and scroll down to "Credentials Details"
  4. In the "Application Username Format" dropdown, select "Custom"

An empty text box will load as well as a link ("custom expression") explaining use.

If you click on the "custom expression" link, you will see examples and area to try out expressions before you save. You can preview expressions, and once you get what you need you can use the one in the try field.

Enter something like ${f:substringBefore(user.login, "@")}@domain.stuff to start.

enter image description here

Upvotes: 1

Related Questions