How to Map email_verified Through SCIM Provisioning in OIDC Connections
Last Updated:
Overview
This article describes how to map the email_verified attribute for users provisioned via SCIM when using an OIDC or Okta Workforce connection.
Applies To
- SCIM
- email_verified
- OIDC
- Okta Workforce
Solution
The email_verified attribute is not included in the SCIM schema defined in RFC 7643 and therefore cannot be mapped directly during SCIM. However, this attribute is a default claim for OIDC, so SCIM can be combined with syncing user profile attributes at login to achieve the desired result.
