# Correct way of getting user

**URL:** <https://devforum.okta.com/t/correct-way-of-getting-user/6759>\
**Category:** Questions\
**Created:** [October 31, 2019, 10:54am UTC](https://devforum.okta.com/t/correct-way-of-getting-user/6759 "2019-10-31T10:54:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![phish.bloop](https://avatars.discourse-cdn.com/v4/letter/p/ecccb3/32.png) [@phish.bloop](https://devforum.okta.com/u/phish.bloop)\
**Post date:** [October 31, 2019, 10:54am UTC](https://devforum.okta.com/t/correct-way-of-getting-user/6759/1 "2019-10-31T10:54:18Z")

</div>

Hi,

What is the correct way of getting users and its relevant information from OKTA. Is there any step by step guide, if we want to support OKTA SSO with our company?

---

<div class="post-metadata">

**Author:** ![dragos](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/dragos/32/1313_2.png) [@dragos](https://devforum.okta.com/u/dragos)\
**Post date:** [November 1, 2019, 12:10am UTC](https://devforum.okta.com/t/correct-way-of-getting-user/6759/2 "2019-11-01T00:10:25Z")

</div>

Hi @phish.bloop

If you are using SAML, the mapping under Directory/Users \>\> Profile Editor \>\> App \>\> Mappings \>\> Okta to App define which attributes from Okta will be sent to your application.

If you are using OIDC, then you will need to define the values as follows:

- Okta authorization server: same method as above
- custom authorization server (From Security \>\> API \>\> Authorization Servers): check out the article [here](https://help.okta.com/en/prod/Content/Topics/Security/API_Access.htm?cshid=create-claims#create-claims)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [January 18, 2024, 12:28am UTC](https://devforum.okta.com/t/correct-way-of-getting-user/6759/3 "2024-01-18T00:28:39Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.
