# Okta profile firstName and lastName do not sync to Raw JSON of Okta-managed Auth0 users **URL:** \ **Category:** Get Help\ **Tags:** oidc-enterprise-connection, connections\ **Created:** [September 26, 2025, 6:08pm UTC](https://community.auth0.com/t/okta-profile-firstname-and-lastname-do-not-sync-to-raw-json-of-okta-managed-auth0-users/192482 "2025-09-26T18:08:21Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![kpaynter](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kpaynter/32/60285_2.png) [@kpaynter](https://community.auth0.com/u/kpaynter)\ **Post date:** [September 26, 2025, 6:08pm UTC](https://community.auth0.com/t/okta-profile-firstname-and-lastname-do-not-sync-to-raw-json-of-okta-managed-auth0-users/192482/1 "2025-09-26T18:08:21Z")
In Auth0, my Okta Integration is set to sync user profiles “On each Login”. In Okta the Auth0 Integration app has the following User Profile Mappings: user.firstName→given\_name user.lastName→family\_name I assume that given the above settings, the mapped Okta user profile values should sync to the Auth0 user on each login. However, the firstName and lastName in the Okta profile never get updated to the Auth0 given\_name and family\_name. (Whereas the email, federated\_groups, federated\_zoneinfo, and federated\_locale values DO get updated) I have tried adding the given\_name and family\_name to the settings in the Authentication→Enterprise→Okta Workforce→my connection→ user mapping as follows: { “attributes”: { “name”: “${context.tokenset.name}”, “email”: “${context.tokenset.email}”, “username”: “${context.tokenset.preferred\_username}”, “given\_name”: “${context.tokenset.firstName}”, “family\_name”: “${context.tokenset.lastName}”, “federated\_groups”: “${context.userinfo.groups}”, “federated\_locale”: “${context.userinfo.locale}”, “federated\_zoneinfo”: “${context.userinfo.zoneinfo}” }, “mapping\_mode”: “use\_map”, “userinfo\_scope”: “openid email profile groups” } This did not add the given\_name and family\_name to my Okta workforce users “Raw JSON”. How can I get the Okta profile values to sync to the Okta-managed Auth0 user on every login? ---
**Author:** ![gerald.czifra](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/gerald.czifra/32/75301_2.png) [@gerald.czifra](https://community.auth0.com/u/gerald.czifra)\ **Post date:** [September 27, 2025, 2:12am UTC](https://community.auth0.com/t/okta-profile-firstname-and-lastname-do-not-sync-to-raw-json-of-okta-managed-auth0-users/192482/3 "2025-09-27T02:12:13Z")
Hi @kpaynter Thank you for reaching out to us! In general, it would depend on how the attributes are configured on the user’s profile ( Okta side ) and how they are sent from Okta to your Auth0 tenant; I recommend checking the mappings on the Okta side, as they might sent as `given_name` and `family_name`, therefore you should map them as : ```auto “given_name”: “${context.tokenset.given_name}”, “family_name”: “${context.tokenset.family_name}” ``` If you do not observe any changes, check if the attributes are present in the token sent from Okta, as that could also be a root cause of the issue. Looking forward to your update and findings. Wishing you a great weekend! Gerald ---
**Author:** ![kpaynter](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kpaynter/32/60285_2.png) [@kpaynter](https://community.auth0.com/u/kpaynter)\ **Post date:** [September 29, 2025, 9:24pm UTC](https://community.auth0.com/t/okta-profile-firstname-and-lastname-do-not-sync-to-raw-json-of-okta-managed-auth0-users/192482/4 "2025-09-29T21:24:24Z")
Hello Gerald, Thanks for your response. I tried the mappings in the Auth0 Okta Integration settings that you suggested. This threw the same error on the Auth0 log: “description”: “Error transforming template due to missing keys (2) from IdP context”, The closest I came to succeeding in a test was this mapping: “given\_name”: “${context.tokenset.name}”, This actually inserts the Okta “name” into the Auth0 root as “given\_name”, so the left hand part of the mapping is correct but the right part (firstName, lastName) is not being found in the token. (Even when I include “given\_name” or family\_name” in the right part of the mapping assignment.) It seems clear to me that Okta is not including the firstName or the lastName in the token, although they are included in the mapping in the Okta Auth0 Integration application. ![Okta Mappings](https://global.discourse-cdn.com/auth0/original/3X/2/a/2a19b9702f55915279561a21550f7923cc4b91de.jpeg) Could you help me find where and how Okta decides what to include in the token? ---
**Author:** ![kpaynter](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kpaynter/32/60285_2.png) [@kpaynter](https://community.auth0.com/u/kpaynter)\ **Post date:** [September 30, 2025, 8:03pm UTC](https://community.auth0.com/t/okta-profile-firstname-and-lastname-do-not-sync-to-raw-json-of-okta-managed-auth0-users/192482/5 "2025-09-30T20:03:49Z")
I got this to work with these mappings in the Auth0 Okta Integration settings. ![image](https://global.discourse-cdn.com/auth0/original/3X/8/4/84d4ab37fbfcd2164abaea78ed93138436a987c1.png) Thanks so much for your help. ---
**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\ **Post date:** [October 14, 2025, 8:04pm UTC](https://community.auth0.com/t/okta-profile-firstname-and-lastname-do-not-sync-to-raw-json-of-okta-managed-auth0-users/192482/6 "2025-10-14T20:04:43Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed. ---
**Author:** ![dawid.matuszczyk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dawid.matuszczyk/32/74550_2.png) [@dawid.matuszczyk](https://community.auth0.com/u/dawid.matuszczyk)\ **Post date:** [November 28, 2025, 7:54pm UTC](https://community.auth0.com/t/okta-profile-firstname-and-lastname-do-not-sync-to-raw-json-of-okta-managed-auth0-users/192482/7 "2025-11-28T19:54:01Z")
Hi team! We are thrilled to announce that **Express Configuration with Okta** is now **Generally Available** for Auth0 applications in the Okta Integration Network! This feature is designed to bridge the gap between your Auth0 application and your enterprise customers who use Okta, making integration faster and less error-prone. ### Key Highlights - **Frictionless Onboarding:** We’ve automated the setup process for your enterprise customers. Express Configuration handles the OpenID Connect (OIDC) setup for Single Sign-On, eliminating the need for manual copy-pasting of Client IDs and secrets. - **Automated Provisioning (SCIM):** User lifecycle management just got easier. This feature automatically configures System for Cross-domain Identity Management (SCIM) for seamless user onboarding and offboarding. - **Enhanced Security:** We’ve included Global Token Revocation (GTR) to support centralized session management, enabling Universal Logout capabilities right out of the box. ### Availability This feature is available immediately in all **public cloud** environments. It will be rolled out to private cloud environments according to their standard release pipeline. ### Resources Ready to streamline your enterprise integrations? Check out the documentation below: - **[Express Configuration with Okta Documentation](https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/okta/express-configuration)** Thanks! Dawid