Skip to main content

Configuring Optional SCIM Attribute Mappings in Okta

Learn how to configure optional SCIM attribute mappings in Okta to sync job title, user type, subsidiary, permission set, and custom fields.

Learn how to configure optional attribute mappings in Okta to sync additional user data into Productive.

In addition to the required attributes needed for SCIM to function, Productive supports a range of optional mappings. These let you sync user details such as job title, user type, company, subsidiary, permission set, and custom employee fields.

👉 Not sure how to set up SCIM? Start with Automatically Sync Users Between Okta and Productive with SCIM.

Set Up Attribute Mappings

To map attributes:

  1. Go to Provisioning > To App > scroll to Attribute Mappings.

  2. To map an attribute, click the pencil icon next to it to open the mapping dialog.

  3. Select how you want to map the attribute — you can map it to an Okta field, set a fixed value, or use an expression — then click Save

Attributes

The following optional attributes are available to map. You can map any value from Okta to these fields, but make sure to follow any special rules noted for each one.

User type

Attribute

userType

Accepted values in Productive

employee or contractor

Description

Determines whether a synced user is provisioned as an employee or a contractor. If not set, users default to employee.

Job Title

Attribute

title

Accepted values in Productive

Any

Description

Populates the user's job title in Productive.

Company

Attribute

urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:organization

Accepted values in Productive

Any

Description

Populates the user's company in Productive. Companies are matched by name. If a match isn't found, a new company is created automatically.

Subsidiary

Attribute

urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division

Accepted values in Productive

Name of an existing subsidiary

Description

Assigns the user to a subsidiary in Productive. The value must exactly match the name of an existing subsidiary. If no match is found, the user will not be provisioned.

Permission set

Attribute

urn:ietf:params:scim:schemas:extension:productive:2.0:User:permission

Accepted values in Productive

Any

Description

Assigns a permission set to the user when provisioned. The value must match the name of an existing permission set in Productive. If no match is found, the user is provisioned with the Staff permission set.

📌 We recommend creating this as a group-level field so permissions can be assigned to multiple users at once.

📌 This field does not exist in Okta by default and needs to be manually created before it can be mapped. To create it, follow the steps for adding attributes in the Syncing Custom Fields section below, using the field name provided above.

Syncing Custom Fields

You can also sync data from Okta into custom employee fields in Productive.

📌 Only text and number field types are supported.

  1. In Productive, go to Settings > Employee Fields.

  2. Click the three dots next to the field you want to sync.

  3. Click Copy SCIM attribute.

The copied value will look something like this:

urn:ietf:params:scim:schemas:extension:customfields:2.0:User:cf131706

To add the attribute in Okta:

  1. In your Okta custom app, go to Provisioning > To App > Profile Editor.

  2. Click Add Attribute.

  3. Split the copied value into two parts:

    • Paste urn:ietf:params:scim:schemas:extension:customfields:2.0:User into External namespace.

    • Paste the unique identifier at the end (cf131706) into External name.

  4. Fill in any remaining fields as needed and click Save.

    📌 Don't forget to map the newly created attribute.

Did this answer your question?