Starting with the 2025.07.0 release, the Okta Admin user reports a product behavior change for Google Workspace and Org2Org Okta Integration Network (OIN) app only. The Push Group > Refresh App Groups does not import any new app groups unless Import Group is enabled and at least one manual/scheduled application import job has been run to import app groups into Okta.
Pre-requisites/Steps:
- An Org2Org OIN or Google Workspace OIN application integration was configured with the Provisioning API enabled on the Okta tenant. Push Groups was configured into the Application.
- In the API integration, the Import Groups option was disabled from the Provisioning > Integration tab.
- The Org2Org or Google Workspace OIN app never has any scheduled or manual import job run from the application itself, which may have previously imported app groups into Okta.
- Clicking on the Refresh App Groups button on the Push Groups tab triggers the Refresh application group import job. It was completed successfully, but observe that 0 app groups are being imported into Okta, despite there are more than 1 app group found in the external application source.
This article will clarify whether this is an expected product behavior.
- API Integration
- Import Groups
- Push groups
- Refresh App Groups
- Google Workspace OIN
- Org2Org OIN app
As of the Okta Production v2025.07.0 release, specifically, for Google Workspace OIN and Org2Org OIN application, the Push Group > Refresh App Groups function will no longer be able to import any application groups into Okta until the following conditions are met:
- The Import Groups checkbox is being checked/enabled within the same application.
- At least one schedule or manual import job is run while the Import Groups checkbox is checked/enabled.
The observed new product behavior is working as expected, as it is part of the Google Workspace and Org2Org OIN app improvements deployed.
The following changes have been made to improve the performance of the Google Workspace/Org2Org app integration:
- More robust group-related error handling.
- Eliminated duplicate group creation upon import when Import Groups is disabled.
NOTE: For all other applications, excluding Google Workspace OIN or Org2Org OIN app, please read All App Groups Have Been Added in Okta when Clicked on "Refresh App Groups" despite "Import Groups" Option being Disabled.
Related References
- All App Groups Have Been Added in Okta when Clicked on "Refresh App Groups" despite "Import Groups" Option being Disabled
- Enable group import from provisioning-enabled apps
- Configure Group Linking
- Remove groups imported from provisioning-enabled apps
- How to bulk delete Groups via Postman
