Snowflake provisioning flow fails with the following error visible in the Okta Dashboard:
Automatic provisioning of user <user> to app Snowflake failed: Error while creating user <user>: Conflict. Errors reported by remote server: User exists with given userName and/or enterprise:user.snowflakeUserName
- Snowflake
- Provisioning
- Error
- System for Cross-domain Identity Management (SCIM)
The conflict error is reported when a user account already exists in Snowflake. Okta cannot create a user with the same username.
- Follow vendor's documentation: OKTA SCIM Conflict Errors Reported By Remote Server.
- It is required to change the ownership of the user in Snowflake to the OKTA SCIM role before trying to add the same username in OKTA SCIM. Execute this statement on the Snowflake account.
GRANT OWNERSHIP ON USER "<user_email>" TO ROLE OKTA_PROVISIONER.
- Attempt the failed tasks again. Go to Okta Admin Console and navigate to Dashboard > Tasks. Any failed assignments should appear under Tasks.
- After locating the failed task for the user that should be retried, click on Retry Selected.
