There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?
Solution: No, it is not possible as Okta queries the whole AD schema and retrieves everything that it's able to
Suggested Answer: B
Get Premium Okta Certified Administrator Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
QU
Quinn
6 months ago
Yeah, I wish it were yes, but it makes sense.
LE
Lenna
7 months ago
It’s frustrating, but I see why it’s no.
KI
Kizzy
7 months ago
Right, Okta queries the entire schema. No exceptions.
RE
Reid
7 months ago
I feel like it limits flexibility. But the answer is still no.
AR
Aretha
7 months ago
I think it's a clear no. Okta pulls everything from AD.
SI
Sina
7 months ago
Are you sure? I thought some attributes could be excluded.
JA
Janna
8 months ago
Sounds right, but what about specific app requirements?
GR
Gretchen
8 months ago
Wow, I didn't know it retrieves everything!
BE
Bethanie
8 months ago
I disagree, I've seen custom attributes mapped before.
KE
Kelvin
8 months ago
That's correct, Okta pulls the entire AD schema.
IS
Isadora
9 months ago
Wait, so Okta gets everything from AD? That's kind of creepy if you ask me.
CH
Chun
9 months ago
Haha, Okta is like a greedy data vacuum, it sucks up everything from AD!
CY
Cyril
9 months ago
I'm pretty sure the answer is no, Okta can't provision those extra attributes.
PR
Precious
9 months ago
Okta can definitely map those extra AD attributes, no problem!
FR
Frederica
9 months ago
I believe the answer is B) No, because Okta does query the entire AD schema, but I can't recall the details on why some attributes wouldn't show up.
KA
Kattie
9 months ago
I feel like we discussed a similar question in practice about attribute mapping, and I thought the answer was no because of how Okta interacts with AD.
BL
Blythe
10 months ago
I think I remember something about Okta only pulling standard attributes from AD, but I'm not entirely sure about the specifics.
JU
Julio
10 months ago
Easy peasy, the solution clearly states that Okta retrieves the entire AD schema, so there's no way to map extra attributes. I'll confidently select B) No.
LA
Lashandra
10 months ago
I'm a bit confused by this question. If Okta gets everything from AD, how could there be attributes that don't show up in the Okta profile? I'll need to double-check my understanding.
JE
Jerry
10 months ago
I think I've got a handle on this. Okta retrieves the whole AD schema, so any extra attributes beyond what's in the Okta profile can't be mapped. I'll go with B) No.
CA
Catarina
11 months ago
Agreed, no way to map extra attributes.
AV
Avery
11 months ago
I'm a bit confused. I thought Okta could map custom attributes if they were defined, but maybe that's not the case for all apps?
HA
Han
11 months ago
Okay, the solution says it's not possible, but I'm not sure I fully understand why. I'll need to review the details on how Okta queries the AD schema.
TH
Theron
11 months ago
Hmm, this seems like a tricky one. I'll need to think carefully about the AD attributes and how they map to the Okta user profile.
NA
Naomi
6 months ago
So, we can't map those extra attributes at all?
JA
Janessa
6 months ago
It sounds like a limitation on Okta's side.
MA
Marvel
6 months ago
But if Okta queries the whole schema, how can anything be left out?
RE
Ressie
6 months ago
Yeah, I wonder what attributes are missing.
JU
Jutta
10 months ago
I think it's a bit confusing.