The Slack Application integration is configured with Provisioning API enabled on an Okta org.
In Directory > Profile Editor > Slack User > Mappings, the displayName attribute does not have the Okta User to Slack mapping as shown below:
Users are allowed to change their display name in Slack, as shown below:
Sometimes, a Slack User's display name does not match the display name in the Okta Slack App. It prevents user profile push updates, and Slack Provisioning fails with the error:
Errors during execution: Error executing pushUserProfile: Bad Request. Errors reported by the connector : {"Errors":{"description":"invalid_display_name (user=<user>)","code":400}}. Error Code: null
This article explains how to exclude the display name when pushing a user profile from Okta.
- Slack
- Provisioning
This error is received because the provided display name is not allowed. The display name in Slack does not match the display name in the Okta Slack App.
This error is thrown because the provided display name is not allowed. The display name in Slack does not match the display name in the Okta Slack App.
Refer to this article for more details: Provisioning with SCIM.
- Okta does not support partial profile push. Okta pushes the app user's full profile during a profile update, including attributes set to Apply mapping on user create only and Do Not map. Refer to the following for more details: About profile push.
-
For the Slack app specifically, the Allow display name update setting under Provisioning > Integration prevents the display name from being sent in the System for Cross-domain Identity Management (SCIM) payload.
-
When Allow display name update is not selected, Okta will not send display name updates to Slack. By default, this setting is disabled.
-
Setting Allow display name update grants the API token created permission to also perform the display name update from Okta to Slack and send the display name in the SCIM payload.
-
-
Go to Okta Admin Console and navigate to Applications > Slack App > Provisioning > Integration > click the Edit button.
-
Check if the Allow display name update setting is enabled. Uncheck this setting if it is not desired to update the display name from Okta to Slack.
-
Once the Allow display name update setting was unchecked, attempt the user provisioning again.
