Okta 1Password SCIM Setup Error Invalid JSON Received From the SCIM Server
Last Updated:
Overview
An invalid JavaScript Object Notation (JSON) error occurs from the System for Cross-domain Identity Management (SCIM) server when configuring API provisioning for 1Password because Cloudflare blocks the request with a sign-in page. Resolve this by contacting Cloudflare Support to configure a Cloudflare Service Authentication Policy based on the Okta cell IP range.
FAILURE: Invalid JSON received from the SCIM server. Cannot parse the JSON.
Error authenticating: message=Invalid JSON received from the SCIM server. Cannot parse the JSON. error=Unexpected character ('<' (code 60)): expected a valid value (JSON String, Number, Array, Object or token 'null', 'true' or 'false') at [Source: (String)"<!DOCTYPE html> <html> <head> <title>Sign in ・ Cloudflare Access</title> <meta charset="utf-8" /> <meta name="robots" content="noindex" /> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=no, width=device-width" /> <article id="data" data-auto-redirect-to-identity="false" data-auto-redirect-url="" data-message=""> </article> <style>*{-webkit-box-sizing:inherit;box-sizing:inherit}body,html{min-height:100vh}html{backgrou"[truncated 27701 chars]; line: 1, column: 2]
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- 1Password
- Provisioning
- API Configuration
- Okta Integration Network (OIN)
Cause
This error occurs when Cloudflare hosts 1Password. When Okta makes the authentication call to 1Password, Cloudflare blocks the request with a sign-in page, which causes the handshake between Okta and 1Password to fail.
Solution
How is the Cloudflare Service Authentication Policy configured?
Identify the Okta cell IP range and contact Cloudflare Support to configure the authentication policy.
- Identify the IP range for the cell that hosts the Okta organization.
- Contact Cloudflare Support for assistance configuring a Cloudflare Service Authentication Policy based on the identified IP range.
