Salesforce provisions errors

Questions
1

Hi,
I am trying to integrate salesforce application with OKTA for provisioning users from OKTA to Salesforce.

I Have successfully configured the API integration and checked the Create ,Update and deactivate.

The flow goes like this:
A user is created in AD and assigned to the relevant Securiy Group (For instance : Salesforce_managers).
Then I import the user from AD to OKTA.
Then I assigned the Salesforce_manager group to salesforce application in order the user to be created in salesforce.(Provision)

However, when I try to assign a user to the salesforce application in order the user to be created in salesforce I get an error:
“Automatic provisioning for user test has failed. User test is not a valid value for the type xsd:dateTime.”

I tried to look for this attribute on the OKTA profile and also on the Salesforce profile and did not find it.

What am I missing?
Thanks!

2

This can happen if you enable the provisioning feature by setting up the app integration and click Save, but then forget to turn on the create, update, and deactivate users options. This error message tells you that the Create user option is not on, as the error message states that it was unable to find a user in the Salesforce application that matches this user, and therefore it could not assign the app integration. If the Create user option is turned on, Okta would create a new user in Salesforce after it found no matching user existed, and
How to solve

Ensure that in the Provisioning tab of your app integration, for the To App setting, you click Edit and enable Create Users , Update User Attributes , and Deactivate Users options.

1 Like