Slack push group fails with the following error visible in the Okta dashboard: 

Unable to update Group Push mapping target App group <groupname>: Error while updating user group <groupname>: Bad Request. Errors reported by the connector : {"Errors":{"description":"permission_denied","code":400}}
 

• Slack
• Provisioning
• Push Groups
• Error

This error is thrown because the OAuth token was not granted permission to perform the requested action.
The service account used for creating the API connection does not have permission on the Slack side to perform the requested action (that is, updating the user group).

 

1. ​​​​On Slack's side, verify the permissions of the account used to create the API connection.
2. Open an incognito window in the browser and access the Okta tenant.
3. Go to Okta Admin Console and navigate to Applications > Applications > Slack > Provisioning > Integration > click the Edit button.
4. Click Re-authenticate with Slack. The Slack application opens in a new window.
    
5. Sign in to Slack with valid credentials and click Authorize. When the Slack window closes, there will be a return to the Okta Admin Console, and the message Slack was verified successfully appears.
6. Click Save.
    

7. Then navigate to Applications > Slack > Push Groups and attempt the group push again.

Related References

• Integrate Slack with Okta
• Slack SCIM API Errors