When a new user is assigned to a SCIM application, Okta returns the below app assignment error:

Invalid externalNamespace
 

If the task is retried from the Admin console, the user is successfully provisioned without further errors.

• Okta Integration Network (OIN)
• SCIM Application Template
• Universal Directory

The External Namespace property configured for the attribute in Okta does not match a supported namespace.

The following external namespaces are supported by SCIM 2.0:

• urn:ietf:params:scim:schemas:core:2.0:User

• urn:ietf:params:scim:schemas:extension:enterprise:2.0:User

1. In the Admin console, under Directory > Profile Editor, locate the SCIM application in question.

2. Click Profile.

3. Delete any attributes that may have an invalid External namespace property associated with them.

   • A prompt to remove the attribute from any mappings where it might be referenced will be received.

4. Re-add any attributes that were deleted in Step 3, and configure the correct External namespace. 

   • For examples regarding external namespaces, see the SCIM Protocol or consult with the application's developer to confirm what to fill in.

5. Click Save Attribute.

An example of an attribute named "costCenter" with a valid External Namespace can be found below:
 
 

Related References

• Okta and SCIM Version 2.0
• Okta and SCIM Version 1.1