Does Push Groups "Link Group" always send a request to the SCIM server?

Questions SCIM
1

Does Push Groups “Link Group” always send a request to the SCIM server?

We maintain a SCIM 2.0 endpoint for our app (OIN listing, and customers also build custom AIW apps against it).

Scenario: a group already exists on our SCIM server - created in our app before SCIM was enabled. An admin goes to Push Groups → Find groups by name → selects the matching Okta group → chooses Link Group.

Does Okta always send a write at that point (PATCH or PUT), or can the link be established with no request at all - specifically when the Okta group and our existing group already have the same displayName and the same members, so there’s nothing to sync?

The SCIM 2.0 reference documents POST/GET/PATCH/PUT/DELETE for groups, but I can’t find anything describing what “Link Group” itself sends. Related thread mentions a PUT (20678 ( SCIM App Push Groups: Why CREATE Group attempt for Match Found and/or Link Group? )) but doesn’t cover the no-delta case.

Does the behavior differ between OIN and AIW custom integrations? (Docs say group updates are PATCH for OIN, PUT for AIW.)

2

Hi,

Okta will always send a request to the SCIM server for Link Group, this behaviour cannot be modified. We do the PUT/PATCH so that the groups from the downstream SCIM server are in sync.

Yes, the behaviour differs between OIN and AIW in respect that the HTTP method used for sync is different. It’s PATCH for OIN Apps and PUT for AIW - Okta and SCIM Version 2.0