1Password Business push group fails with the following error visible in the Okta dashboard:

Unable to update Group Push mapping target App group <group name>: Error while creating user group <group name>: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed

• 1Password Business
• Provisioning
• Group Push
• Error

This error is generated because there is a problem with the 1Password SCIM bridge configuration and SSL certificate. The handshake is failing.

1. Refer to 1Password Business: Configuration Guide and If you’re having trouble with 1Password SCIM Bridge. For additional assistance with the 1Password SCIM bridge configuration, please contact 1Password Business Support.
2. Once the 1Password SCIM bridge configuration and SSL Certificate are verified, go to Okta Admin Console and navigate to Applications > Applications > 1Password Business > Provisioning > Integration > Edit.
3. In the Base URL, enter the URL of the SCIM bridge (not the 1Password account sign-in address). For example: https://scim.example.com.
4. In the API Token, enter the bearer token for the SCIM bridge.
5. Click Test API Credentials, verify the connection was successful, and then click Save.

6. Afterward, go to Okta Admin Console and navigate to Applications > Applications > 1Password Business > 
       Push Groups, and attempt the group push again.

Related References

• 1Password Business: Configuration Guide
• If you’re having trouble with 1Password SCIM Bridge