The post bellow was closed but I am experiencing similar behaviour where multiple duplicate requests are made to a GET/Groups and PUT/Groups asking to add add a user to a group after I just have removed it.
For example, I have set up Push Group and created a new user, giving it access to the app group (used for assignment and connected to the push group by a rule).
After the POST/users to create the User, Okta makes these requests:
- GET/GROUPS/ID - I respond with group details and empty members.
- PUT/GROUPS/ID - payload empty members - I respond with same group and empty members.
- GET/GROUPS/ID - I respond with group details and empty members.
- PUT/GROUPS/ID - payload empty members - I respond with same group and empty members. (DUPLICATE REQUEST)
- GET/GROUPS/ID - I respond with group details and empty members.
- GET/GROUPS/ID - I respond with group details and empty members.
- PUT/GROUPS/ID - payload FINALY WITH NEW USER IN MEMBERS - I respond with group details and members including new member.
- GET/GROUPS/ID - I respond with group details and NEW user in members.
- PUT/GROUPS/ID - payload same new user in members DUPLICATE PUT REQUEST - I respond with group details and members including new member.
To create a new user and assign it to a group, and syncing the membership with PUSH Group took 9 requests, but it did have the required end result.
Example 2 and one that did not have an desired result, is removing same user from the group: - GET/GROUPS/ID - I respond with group details and NEW user in members.
- GET/USERS/newUserID - I respond with the user details, active = true.
- GET/GROUPS/ID - I respond with group details and NEW user in members, DUPLICATE
- PUT/USERS/newUserID - payload has active = false - I respond with the user details, active = false.
- PUT/GROUPS/ID - payload members CONTAINS SAME NEW USER I JUST REMOVED- I respond with group details and members including new member.
- GET/GROUPS/ID - I respond with group details and NEW user in members.
- PUT/GROUPS/ID - payload members CONTAINS SAME NEW USER I JUST REMOVED- I respond with group details and members including new member. DUPLICATE.
To remove the user Okta made 7 requests, 2 GET Duplicates and 2 PUT Duplicates, asking the service provider to add the user back in the group after just has been Removed from group and PUT request sent to make it InActive.
At this point the user does not appear in the group in Okta, but still in my app group. I have manually PUSH NOW to sync membership again, which did have the desired result, but again should have been done automaiticaly, and there was duplicate requests:
*GET/GROUPS/ID - I respond with group details and NEW user in members (should have been removed with last put request not added after I just removed it). - GET/GROUPS/ID - I respond with group details and NEW user in members. DUPLICATE.
- PUT/GROUPS/ID - payload members CONTAINS SAME NEW USER WHIHC IS NOT EVEN PART OF THE GROUP ANYMORE- I respond with group details and members including new user.
- PUT/GROUPS/ID - payload members is empty, which should have been before manually pushing - I respond with group details and empty members.