MatthewH.10249 (State of Iowa) asked a question.
Don't use app assignment groups as push groups in ServiceNow
In a recent support ticket video call with Okta, the tech made an unrelated statement to our situation but I wrote it down nevertheless as I found it interesting. He said that if we decide to use Push Groups for ServiceNow provisioning that we should make sure we never use an app assignment group as a push group or it will cause issues. We did not get into the details as what errors or why this would be a problem but I thought it might make for a good community question.
So does anyone know why it would be a problem making an app assigned group a push group to ServiceNow?
Hi,
This limitation is not just for ServiceNow but you should use different groups for all applications that are using group push. Okta has documentation about it on this page: https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-about-group-push.htm
In the last section it says:
The following are the known Group Push limitations:
So according to Okta there could be some issues with the memberships of groups when they are being used for both assignment for the application in Okta but also pushed to the application. I haven't seen any problems on my own when I've seen customers do this, but since Okta recommends it I am trusting that they have seen some issues with it in the past.
I hope that answers your question!
/Alexander