Regarding pushing groups via SCIM, the docs states one of the requirements to be: "The group you pushed is not the same one you used to assign and provision users to the app.“ (Troubleshooting Group Push | Okta) I came to realize this might be due to race conditions occurring between the app assignment jobs and the SCIM push group jobs due to the same group, especially upon deactivation. It’s a custom SCIM SWA app used to push users and groups to an external app.
It’s cumbersome to having to manually mirror two groups in Okta; is there a way to still manage app users in a single group and yet obey this two-group SCIM push group requirement? I fiddled around using rules to mirror the groups, but still run into race-like issues.
Thanks in advance.