Imports from LDAP are failing. The following error can be found in the LDAP agent logs:

Error while posting data back to Okta=HTTP/1.1 400 Bad Request

• Directories
• LDAP
• Imports

Unsupported characters exist in the data being imported from the LDAP database.

Okta supports a subset of the UTF-8 specification character set that can be encoded in three bytes or fewer. Basic Multilingual Plane (BMP) or supplementary characters that must be encoded using four bytes are not supported.

1. Enable verbose logging on the LDAP Agent using the instructions in Locate the Okta LDAP agent log.
2. In the verbose logs, look at the data in the blob that Okta received before the POST that caused the error on the scanData endpoint to search for illegal characters. 
   • For example, run a regular expression (regex) search in a Notepad++ document containing that data segment to find all non-UTF-8 characters.

     [\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x9F]