Assigning a New User via a SCIM 2.0 Gives the Error: "Automatic provisioning of user: Invalid externalNamespace"
Last Updated:
API Access Management
Overview
The purpose of this article is to provide a resolution for the SCIM 2.0 error:
Automatic provisioning of user {USER_NAME} to app {APP_NAME} failed: Error while creating user: Invalid externalNamespace
Applies To
- SCIM 2.0
- Provisioning
- Invalid externalNamespace
Cause
This issue might occur when creating a custom attribute in the SCIM app, such as the following, where the External namespace (Schema) is not set to the correct urn. Below the namespace is just the attribute name, 'test_er'.
Solution
Instead, create a variable in the SCIM extension namespace (urn:ietf:params:scim:schemas:extension:) as below.
NOTE: The best practice for the full schema URI depends on the custom schema/attribute being used, as mentioned in this RFC.
