← Course Home
Okta Certified Administrator · Part I

User Lifecycle Management

29% of the exam — the second-largest domain.

User Lifecycle Management

Module 1: Profile Sourcing & Write-Back Concepts

6 sub-topics · this deck covers sub-topic 4 of 6

↑ Module 1 Overview

The Exam Bullet

"Demonstrate ability to work with multiple profile sources"

Real orgs rarely have just one system of record. This sub-topic is about what actually happens — and what can go wrong — when more than one app claims to be a profile source for the same user.

The Mechanism

A profile source is "an app that acts as the source of truth for user identities." Once enabled, it can manage the full lifecycle — creation, updates, and deactivation.

When multiple sources exist, Okta lets you set a priority order — but only one profile source can serve a user's profile at any given time. Priority decides which one wins.

The Gotcha — Three Real Risks

If both Profile Source and Update User Attributes are enabled on the same app, three specific things can go wrong:

1. Unwanted overwrites — Okta updates can replace unmapped attribute values, even from the highest-priority source.
2. Attribute conflicts — updates can overwrite attributes sourced from other identity providers.
3. Race conditions — outdated attribute combinations can get pushed if changes happen across systems at different times.

Matching Rules

To prevent this from spiraling, Okta uses matching rules to maintain a link between the profile source and Okta — distinguishing a brand-new imported user from an update to an existing one.

The Exam Angle

Watch for scenario questions built around these traps:

→ "Two sources are both configured as the profile source for the same user." = not possible — only one source can serve a profile at a time; priority order decides.

→ "An attribute from one IdP got silently overwritten." = the attribute-conflict risk of enabling Profile Source + Update User Attributes together.

One Line To Remember

Only one profile source can serve a user's profile at a time — priority order decides which. Combining Profile Source + Update User Attributes on one app risks unwanted overwrites, cross-IdP attribute conflicts, and race conditions. Matching rules distinguish new imports from existing-user updates.

Sources: help.okta.com — usgp-about-profile-sourcing.htm