Auth0 Email Fails to Update via SCIM for Pre-Existing Users

When updating a user's email address in Okta, the update fails to sync to Auth0 via System for Cross-domain Identity Management (SCIM) for users who authenticated before SCIM enablement. This occurs because the SCIM integration lacks the correct mappings. Adding specific mappings for the username and email attributes in the SCIM configuration resolves this issue.

• Auth0
• System for Cross-domain Identity Management (SCIM)
• User Provisioning

The SCIM integration lacks the explicit attribute mappings required to link and update the email addresses of pre-existing users.

How do SCIM mappings update pre-existing user emails?

Configure the SCIM attribute mappings for the username and email to ensure Okta successfully updates the user profile in Auth0.

1. Add the following mappings to link the SCIM attributes to the Auth0 attributes:

    {
        "scim": "userName",
        "auth0": "username"
    },
    {
        "scim": "emails[primary eq true].value",
        "auth0": "email"
    },

2. Update the user's email in Okta to trigger the synchronization to Auth0.

NOTE: Updating the userName attribute creates a new user in Auth0 because Auth0 uses this attribute as a unique identifier. Always test these mappings in a development environment before deploying to production.

(Provide the solution to the issue. If steps are included, provide them in a numbered list.)