Okta Snowflake Push Group Error: Invalid Group Membership Value Specified

A Snowflake Push Group fails in Okta when a user in the pushed group lacks provisioning in Snowflake or has an incorrect application user externalId. Resolve this issue by verifying that the user has an active Snowflake account and a matching externalId before retrying the group push. The following error appears in the Okta dashboard: 

Unable to update Group Push mapping target App group <group name>: Error while creating user group <group name>: Bad Request. Errors reported by remote server: Invalid group membership value specified <externalId>

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Snowflake
• Provisioning
• Group Push
• Okta Integration Network (OIN)

The group push fails with this error if the user mentioned in the error message lacks provisioning and does not exist in the Snowflake application, or if the application user externalId is incorrect. 

How is the Snowflake group push error resolved?

Validate the user account status in Okta and Snowflake, ensure externalId match, and retry the group push by following these steps.

1. Verify that the pushed user has an active status in Okta, an assignment to the Snowflake application, and an active account in Snowflake.
2. Confirm that the application user externalId on the assignment window matches the externalId in the Snowflake application.
3. Validate that the user mentioned in the error message has an active account in Snowflake application.
4. Navigate to Applications > Applications > Snowflake > Push Groups.
5. Attempt the group push again.