We have a custom Okta app set up with SCIM provisioning. The app is of type SWA with the SCIM Base URLs properly configured. Our use case is to sync users added/removed in the Okta app with our external application.
However, when we try to assign a user to the application, we receive the following error:
Automatic provisioning of user <agent> to app <scim app> failed: Matching user not found.
I’ve confirmed that provisioning permissions for Create Users, Update Users, and Deactivate Users are enabled in the Okta app. Despite this, the provisioning still fails.
Any insights into what might be causing this issue or how to troubleshoot it further would be greatly appreciated!
When we query for users we will send a GET to your server to determine if the user exists: SCIM 2.0 Protocol Reference - after that, if User Creation is on we’ll send a POST to create that user. If this isn’t happening, we should check and make sure everything is good on your app. Let’s try a few things:
Attempt to validate your API Credentials from the “Provisioning” tab under “Integration” to make sure that connection’s still alive. It probably is if you’re getting this particular error, but check just to make sure.
Ensure that “Push new users” is checked here, uncheck and recheck it and save the configuration
Under “To App” in the Provisioning section, uncheck and recheck “Create users” here as well and save it.