How to Map email_verified Through SCIM Provisioning in OIDC Connections

Overview

This article describes how to map the email_verified attribute for users provisioned via SCIM when using an OIDC or Okta Workforce connection.

Applies To

  • SCIM
  • email_verified
  • OIDC
  • Okta Workforce

Solution

The email_verified attribute is not included in the SCIM schema defined in RFC 7643 and therefore cannot be mapped directly during SCIM. However, this attribute is a default claim for OIDC, so SCIM can be combined with syncing user profile attributes at login to achieve the desired result.

Related References