Snowflake Push Group Error "Errors reported by remote server: Requested number of membership exceeded the max limit 100"
Last Updated:
Overview
When using Push Groups with Snowflake, the error below may be encountered:
Unable to update Group Push mapping target App group <GroupName>: Error while creating user group <GroupName>: . Errors reported by remote server: Requested number of membership exceeded the max limit 100
Applies To
- Snowflake
- Provisioning
- Error
- System for Cross-domain Identity Management (SCIM)
Cause
The error is described in the vendor's documentation: Okta error Requested number of membership exceeded the max limit 100.
This issue is caused by a known limitation documented in the Okta SCIM documentation regarding the maximum number of requests. Snowflake supports a maximum of 500 concurrent requests per account per SCIM endpoint (for example, the /Users endpoint, the /Groups endpoint). After the account exceeds this threshold, Snowflake returns a 429 HTTP status code (like too many requests).
NOTE: This request limit usually only occurs during the initial provisioning when relatively large numbers of requests (for example, more than 10 thousand) occur to provision users or groups. When first pushing a group to Snowflake, Okta will push all users in the group in one PUT, exceeding the maximum number of requests.
Solution
The workaround to this error is first to push the group empty of users or with less than 100 users.
- Create a new push group with less than 100 users.
- Push the group down to Snowflake.
- Once the group is successfully pushed, populate the group with users as necessary.
