Raftab provisioning flow fails with the following error visible in the Okta dashboard:

Automatic provisioning of user <username> to app Reftab failed: Error while creating user <username>: Invalid externalNamespace: urn_ietf:params:scim:schemas:extension:enterprise:2.0:User for property: deliveryAddress

• Raftab
• Provisioning
• Error

The "External Namespace" property configured for the deliveryAddress attribute in Okta does not match a supported namespace.

For example, the following external namespaces are supported by SCIM 2.0:

• urn:ietf:params:scim:schemas:core:2.0:User
• urn:ietf:params:scim:schemas:extension:enterprise:2.0:User

Here,  urn_ietf:params:scim:schemas:core:2.0:User has an underscore instead of a colon (:).

1. Go to the Okta Admin Console and navigate to Directory > Profile Editor. Locate and click the Raftab application.
2. Delete the attribute that has an invalid External namespace property associated with it.
   • NOTE: A prompt may appear to remove the attribute from any mappings where it might be referenced.
3. Re-add the attribute that was deleted in Step 2, and ensure that the correct External namespace is configured (for example, external namespaces). Refer to the SCIM Protocol document. If unsure what to fill in, please contact Raftab support.
4. Click Save Attribute.

5. Attempt the failed tasks again. Navigate to Dashboard > Tasks. Any failed assignments should appear under Tasks.
6. After identifying the failed task for the user that should be retried, click Retry Selected.