This other post made me think that there was maybe a problem on Okta’s side: SCIM Deactivation via Group Membership