Provisioning Apps for Users Fails with Access Denied or Insufficient Permissions

Dec 11, 2023

Okta Classic Engine

Okta Identity Engine

Administration

Overview

Provisioning an app for users fails with an Access Denied or Insufficient Permissions error.

Applies To

Cause

The API Token acquired from the service provider has expired, or the API credentials have been changed.

Solution

Re-authenticate the API credentials by performing the following steps:

In the Okta Admin Console, navigate to Applications and click on the affected application.
Click the Provisioning tab.
In the Settings pane to the left, click Integration.
Click Edit, then click Test API Credentials.
If a message indicating that the credentials were verified successfully is not received:
1. Ensure that the username and password are correct
2. Ensure that the account has appropriate administrator access (i.e., that an Office365 Global Administrator account is being used)