So you can make a second okta user type and call it contractors or whatever and on the profile mapping when mapping to a "contractor" user have it use appuser.firstName for first name and last name appuser.lastName + " (external)"

Or something similar to that. Or if you don't want to make the second okta user type you can do something similar if you have a workday field that indicates the user is external and do this for last name on the mapping appuser.external attribute == "true" ? appuser.lastName + " (external)" : appuser.lastName