Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The update_user method doesn't work reliably with string arrays #390

Open
mm-irvingleonard opened this issue Feb 29, 2024 · 0 comments
Open

Comments

@mm-irvingleonard
Copy link

mm-irvingleonard commented Feb 29, 2024

On an Okta instance sourcing users from a directory (Workday) while doing an update_user on a user profile containing an empty string array inherited from a profile source will fail with the error Okta HTTP 403 E0000023 Operation failed because user profile is mastered under another system.

The problem seems to be related to the difference of opinions that the sdk and the Okta server have of what an "empty string array" is. The sdk omits the attribute from the response (probably the correct interpretation) since "it's empty" but apparently the server sees '[""]' -> null, tries to perform the update and fails.

To replicate:

  • define a custom attribute as a string array
  • map such attribute to some directory value and set the source priority to Inherit from profile source
  • use update_user to update ANY other attribute that you're supposed to be able to update
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant