Okta API Rate Limit Error Occurs When Deprovisioning Users From Lattice
Last Updated:
Overview
A rate limit error occurs when administrators remove users in bulk from the Lattice application because the Lattice endpoint restricts the number of concurrent requests. Administrators must contact Lattice support to increase the rate limit or manually retry the failed tasks in the Okta Admin Console to resolve the issue. When this error occurs, Okta generates the following message in the System Log:
FAILURE: Rate limit exceeded. Operation will be retried automatically in <number> seconds.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Lattice
- Provisioning
Cause
A rate limit on the Lattice application side for the api.latticehq.com/scim/v2/Users endpoint causes this error. The endpoint only processes a specific number of requests at any given time. This is observable within the System Log.
Solution
How is the Lattice rate limit error resolved?
The application endpoint rate limit is governed by Lattice. Contact Lattice support to request a rate limit expansion to allow bulk deprovisioning events to process successfully.
Alternatively, retry the failed deprovisioning tasks directly from the Okta Admin Console.
- Navigate to Dashboard, and then select Tasks.
- Search for the Lattice tasks.
- Select Retry Tasks.
NOTE: Keeping the existing rate limit on the Lattice endpoint slowly clears the pending tasks. Multiple retries may be required depending on the number of deprovisioning events, as the application rate limit may trigger again.
