Okta Error Occurs When Pushing Google Workspace Group Due to Invalid groupKey
Last Updated:
Overview
A Google Workspace group push flow fails because the pushed group name or generated group email contains invalid characters or exceeds the character limit. Resolve this issue by ensuring the group name adheres to Google Workspace naming conventions and character limits. The Okta dashboard displays the following error:
Failed to update group. Invalid Input: groupKey
Review the following image for an example of the invalid groupKey error displayed in the Okta dashboard.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Google Workspace
- Provisioning
- Group Push
Cause
The pushed group name or the group email generated by Google contains invalid characters or exceeds the character limit. Google populates the group email value based on the name of the pushed group. If the group is created/updated directly in Google, specify a different email address for the group. This is not possible through a group push.
Solution
How is the invalid groupKey error resolved?
Resolve the invalid groupKey error by renaming the group in Okta to comply with Google Workspace naming conventions and character limits.
- Ensure the group name does not contain an ampersand (&), equals sign (=), underscore (_), apostrophe ('), dash (-), plus sign (+), comma (,), brackets (<,>), or more than one period (.) in a row. Google treats the group email address like a username and restricts these characters.
- Ensure the group name does not exceed 73 characters.
