Add/Update a SCIM Attribute in Okta

The following instructions are to add or update the SCIM mapping in Okta to add the object security identifier (object SID).

Note that this process will start a resynchronization of all users in scope for SCIM. The potential impact would be a delay in any SCIM synchronization tasks for pending user changes, or new users, while the full resynchronization is taking place.

To Add/Update your SCIM Attribute Mapping in Okta

1. Sign into the Okta admin console.
2. From the left menu, click Directory > Profile Editor.
   Okta's Profile Editor displays.
3. In the Filters drop-down menu, select Apps.
4. Select the Axiad Cloud User profile.
   The Attributes section displays.
5. Click Add Attribute.
6. Enter the following values:
   • Display name: Object SID
   • Variable name: objectSid
   • External namespace: urn:ietf:params:scim:schemas:extension:CustomExtensionName:2.0:User
     Leave all other values as their default.
7. Click Save.
8. Enable the mapping of the SID from Okta to Axiad Cloud.
   NOTE

   This will add a new attribute to all user profiles. This will only need to have a value in it for AD users, but all Okta users in your organization will now have this as an available attribute.

   1. From the left menu, click Directory > Profile Editor.
      Okta's Profile Editor displays.
   2. In the Filters drop-down menu, select Okta.
   3. Select the User (default) for the Okta profile.
   4. Click Add Attribute.
   5. Enter the following values:
      • Display name: Object SID
      • Variable name: sid
      • External name: objectSid
        Leave all other values as their default.
   6. Click Save.
   7. Navigate back to Okta's Profile Editor.
   8. In the Filters drop-down menu, select Apps.
   9. Click Mappings next to the Axiad Cloud User profile.
      The Axiad Cloud User Profile Mappings dialog box displays.
   10. In the sid Attribute section, in the Choose an attribute or enter an expression search field, enter objectSid.
   11. Select objectSid from the search results.
   12. Click Save Mappings.
   13. Click Apply updates now.
       The Axiad Cloud User Profile Mappings dialog box closes.
   14. Click Axiad Cloud User Profile Mappings next to the Axiad Cloud User profile again.
       The Axiad Cloud User Profile Mappings dialog box opens.
   15. Click Okta User to Axiad Cloud.
   16. In the objectSid mapping field, enter user.sid.
   17. Click Save Mappings.
   18. Click Apply updates now.
9. Provision the Active Directory integration.

   1. From the left navigation bar, click Directory > Directory Integrations.
   2. Select your Active Directory integration.
   3. Click the Provisioning tab.
   4. In the Settings drop-down menu, select To Okta.
   5. Locate the sid attribute you created and click the Edit icon.
   6. Locate the Map from <your Active Directory name> attribute value and select objectSid from the list. 
   7. Click Save.
      The updates begin.
10. When the updates complete, close your browser and notify your Axiad team that the SCIM resynchronization is in process. Axiad will then monitor Axiad user accounts for object SID attribute updates.