9yaeq (9yaeq) asked a question.
I'm seeing an issue while trying to enable functionality for a SCIM app.
When I try to enable "Import Groups", I'm getting a Bad Request error, with the error code being E0000020 (Illegal argument exception).
Notably, this error does NOT seem to be coming from my SCIM server, since no Groups API request ever reaches it—when I try to enable Import Groups, a "/v1/scim/v2/Users?startIndex=1&count=2" request comes through and gets a 200 reply, and that's it. This is the same behavior that happens if I *don't* have "Import Groups" enabled, and "Import Groups" is the only checkbox in the Provisioning -> Integration tab that I'm not able to select.
I know that this question has been asked before (https://support.okta.com/help/s/question/0D54z00007JYeGaCAL/scim-connection-cannot-enable-import-groups?language=en_US), but I'm passing all of the RunScope tests, and my System Logs don't reveal any errors. When I click "Test Connector Configuration", the test is successful. I see this behavior both on existing apps and when I try to create a new app. What do I need to do to enable group imports?
Hello @Caleb
I hope you are having a great day
Thank you for posting, According to the error provided this its a HTTP Status: 400 Bad Request error and the link below describe the way to enable the groups import from provisioning-enabled apps: https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-import-groups-app-provisioning.htm
If you need further assistance you can also feel free to post this question on our Okta Developer Forums: https://devforum.okta.com, this is a place for the Okta developer community to interact.
Have a great day ahead
Henry E.
Okta Inc
Hello, I am getting the exact same problem as @9yaeq (9yaeq) originally posted. The link in this response is what I (and I believe Caleb) was already doing, and that is what was causing the Bad Request error in the first place.
Are there any solutions or workarounds for this at the time? Thanks!
I encountered the same issue and found that using the "SCIM 2.0 Test App" from the OIN, rather than a SAML app I made myself worked, without making any changes to the SCIM server I'm working on.