This article provides a solution for an error that occurs when an admin attempts to update a user's profile for an application within the Okta Admin Console. This issue can occur when the application was previously configured for Provisioning but is now configured strictly for Single Sign-On (SSO). When the administrator updates the profile, the following generic error message appears:
An error occurred
- Single Sign-On Applications
- Profile Editor
- Provisioning
- Okta Identity Engine (OIE)
This error occurs because attributes in the application's Profile Editor are marked as required. These attribute requirements can remain from a previous configuration where provisioning was enabled.
When provisioning is disabled, lingering attributes in the application profile are still included in update calls to the downstream application. If any of these lingering attributes are marked as required, the system attempts to push them, causing the update to fail because the integration is now SSO-only and only expects the username attribute.
To resolve this issue, modify the application's profile to remove the unnecessary required attribute constraints.
- In the Admin Console, go to Directory > Profile Editor.
- In the Profile Editor list, locate the application and click the name of its user profile to open the editor.
- For each attribute that should not be required (for example, Given Name or Family Name), click the information icon (for default attributes) or the pencil icon (for custom attributes) to edit its settings.
- In the editor window that appears, clear the Attribute required checkbox.
- Click Save Attribute.
Repeat these steps for all other attributes that are incorrectly marked as required. Once all unnecessary constraints are removed, the user's profile can be updated without error.
