Google Workspace push group fails with the following error visible in the Okta dashboard:

Unable to update Group Push mapping target App group <groupname>: Failed to create group <groupname>. javax.ws.rs.BadRequestException: HTTP 400 Bad Request 

• Google Workspace
• Provisioning
• Group Push
• Okta Identity Engine (OIE)
• Okta Classic Engine

This error occurs because the Google Workspace credentials used to create the API connection are invalid.

To resolve the issue, follow the steps mentioned below:

1. In the Okta Admin Console, navigate to Applications > Applications > Google Workspace > Provisioning > Integration > click the Edit button.
2. Click Re-authenticate with Google Workspace.
   
    

3. Enter Google Workspace Admin account credentials:

• 1. Enter Admin username.
  2. Enter Admin password.
  3. Review the list of permissions Google will grant Okta to perform in the Google Workspace tenant. If acceptable, click Allow.

4. Back on the Provisioning page in Okta, a message confirming successful authentication will be displayed. Click Save.

5. Attempt the failed push group again. 

Related References

• App Integration - Google Workspace