OPP connector - Incremental import oddity

Hi All,

Has anybody implemented incremental import with groups? Without groups everything works fine, but when groups are mixed in things go really wild.

  1. Starting with the fact that getGroups does not support incremental parameter, so when Okta initiates an incremental import operation we need to send all groups back from the application, which is not a big deal, but still weird.
  2. When I send back incremental for users, I see that Okta removes all the group membership for all other users not being present in the returned batch, even though I send ALL members for all groups back to Okta.

It looks like there is a bug or something in processing of incremental, as if Okta finds an intersection of users and groups returned even for incremental batch.

Any hints from whoever has implemented that before? Maybe I’m missing something very simple here?

cc: @andrea

Thank you for reaching out here on the Okta Developer Forum. We noticed that your question is more closely related to SCIM On-Premise Provisioning. To ensure you receive the most accurate and timely assistance, we recommend reposting your query on Okta’s Community at: Okta Help Center (Lightning)

Okta’s teams on the Community are better equipped to provide the comprehensive support and guidance you need as they have the specialised knowledge and expertise in SCIM On-Premise Provisioning.

We appreciate your understanding and are committed to ensuring you receive the best possible support. If you have any other questions or issues related to Okta’s developer tools and API’s, feel free to post them here, and we’ll be happy to assist!