Okta Certified Administrator Exam - Topic 8 Question 73 Discussion

Actual exam question for Okta's Okta Certified Administrator exam

Question #: 73
Topic #: 8

[All Okta Certified Administrator Questions]

There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

Solution: No, it is not possible as Okta queries the whole AD schema and retrieves everything that it's able to

AYes

BNo

Show Suggested Answer

Suggested Answer: B

by Kanisha at Nov 22, 2025, 09:12 AM

Limited Time Offer

25%

Off

Get Premium Okta Certified Administrator Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Quinn

3 months ago

Yeah, I wish it were yes, but it makes sense.

upvoted 0 times

...

Lenna

4 months ago

It’s frustrating, but I see why it’s no.

upvoted 0 times

...

Kizzy

4 months ago

Right, Okta queries the entire schema. No exceptions.

upvoted 0 times

...

Reid

4 months ago

I feel like it limits flexibility. But the answer is still no.

upvoted 0 times

...

Aretha

4 months ago

I think it's a clear no. Okta pulls everything from AD.

upvoted 0 times

...

Sina

4 months ago

Are you sure? I thought some attributes could be excluded.

upvoted 0 times

...

Janna

5 months ago

Sounds right, but what about specific app requirements?

upvoted 0 times

...

Gretchen

5 months ago

Wow, I didn't know it retrieves everything!

upvoted 0 times

...

Bethanie

5 months ago

I disagree, I've seen custom attributes mapped before.

upvoted 0 times

...

Kelvin

5 months ago

That's correct, Okta pulls the entire AD schema.

upvoted 0 times

...

Isadora

6 months ago

Wait, so Okta gets everything from AD? That's kind of creepy if you ask me.

upvoted 0 times

...

Chun

6 months ago

Haha, Okta is like a greedy data vacuum, it sucks up everything from AD!

upvoted 0 times

...

Cyril

6 months ago

I'm pretty sure the answer is no, Okta can't provision those extra attributes.

upvoted 0 times

...

Precious

6 months ago

Okta can definitely map those extra AD attributes, no problem!

upvoted 0 times

...

Frederica

6 months ago

I believe the answer is B) No, because Okta does query the entire AD schema, but I can't recall the details on why some attributes wouldn't show up.

upvoted 0 times

...

Kattie

6 months ago

I feel like we discussed a similar question in practice about attribute mapping, and I thought the answer was no because of how Okta interacts with AD.

upvoted 0 times

...

Blythe

7 months ago

I think I remember something about Okta only pulling standard attributes from AD, but I'm not entirely sure about the specifics.

upvoted 0 times

...

Julio

7 months ago

Easy peasy, the solution clearly states that Okta retrieves the entire AD schema, so there's no way to map extra attributes. I'll confidently select B) No.

upvoted 0 times

...

Lashandra

7 months ago

I'm a bit confused by this question. If Okta gets everything from AD, how could there be attributes that don't show up in the Okta profile? I'll need to double-check my understanding.

upvoted 0 times

...

Jerry

7 months ago

I think I've got a handle on this. Okta retrieves the whole AD schema, so any extra attributes beyond what's in the Okta profile can't be mapped. I'll go with B) No.

upvoted 0 times

...

Catarina

8 months ago

Agreed, no way to map extra attributes.

upvoted 0 times

...

Avery

8 months ago

I'm a bit confused. I thought Okta could map custom attributes if they were defined, but maybe that's not the case for all apps?

upvoted 0 times

...

Han

8 months ago

Okay, the solution says it's not possible, but I'm not sure I fully understand why. I'll need to review the details on how Okta queries the AD schema.

upvoted 0 times

...