Google Workspace push group fails with the following error visible in the Okta dashboard:
Unable to update Group Push mapping target App group <groupname>: Failed to create group <groupname>. Failed to create group <groupname>. Group name can not be converted into a valid email
- Google Workspace
- Provisioning
- Group Push
- Error
Google Workspace sets the email of a Pushed Group based on the domain value provided on the General tab in the Okta Google Workspace Application.
If the domain value on the General tab in the Google Workspace Application is incorrect (that is, if it is not the actual value of the Google Apps company domain), Google Workspace returns this error.
If the domain itself is correctly set under the General tab, another reason is invalid or special character in the group name.
Google Workspace groups are fundamentally tied to an email address. When creating a group, Google Workspace automatically assigns it an email address based on the group name. This email address is used for sending messages to all members of the group. Therefore, the group name must adhere to the following rules for a valid email address prefix (the part before the "@" symbol):
- Allowed Characters:
Typically, alphanumeric characters (a-z, A-Z, 0-9), periods (.), underscores (_), hyphens (-), and plus signs (+) are allowed.
- No Spaces:
Spaces are generally not allowed in the local part (before the "@") of an email address. If a space is present in the group name, it will be converted to an underscore (_).
- Go to Okta Admin Console and navigate to Applications > Applications > Google Workspace > General tab > check if the field Your Google Apps company domain has the actual value of the Google Workspace tenant.
- Refer to Google Workspace: Change the Already Configured Domain. If the domain value is incorrect, then it is not possible to change the domain on the Okta side once the Google Workspace app is created. The application in Okta links to the domain initially provided, and an API call to change the domain is not possible. It will be necessary to create a new Google Workspace app and configure the application with the correct domain.
- Then, attempt to push the group.
- If the error is still present, please remove all special characters from the group name (excluding alphanumeric characters, periods, underscores, hyphens, or plus signs).
- Attempt to push the group again.
