AlexandruB.51517 (Customer) asked a question.
Trying to push Okta Groups to AWS SSO
Hello,
I am trying to push Okta groups to ASW SSO. While this was successful when the group doesn't have any membership, as soon as I've added at least one member in that particularly group, the sync broken with the following error message:
Unable to update Group Push mapping target App group Test2: Error while creating user group Test2: Bad Request. Errors reported by remote server: Request is unparsable, syntactically incorrect, or violates schema.
I am seeing the same issue with this configuration and am waiting to hear back from support. Any suggestions for resolving this issue would be appreciated.
No solutions until now. Still struggling to solve it. I will update here if I find something.
Per this documentation https://docs.aws.amazon.com/singlesignon/latest/userguide/okta-idp.html "Using the same Okta group for both assignments and group push is not currently supported. To maintain consistent group memberships between Okta and AWS SSO, you need to create a separate group and configure it to push groups to AWS SSO."
That means (for now at least) you'll need to create two discrete groups within Okta for use with AWS SSO. One would be for assignment of the Application in Okta such as "Engineering AWS Users" and the other would be used for Push groups for permission set assignment within AWS SSO such as "AWS - Engineering." The AWS - Engineering would be the only one that actually shows up in AWS SSO.