ja336 (ja336) asked a question.
SCIM provisioning of users and groups but 'groups' attribute on user is empty
I enabled SCIM provisioning on users and groups, so I get updates for both endpoints: /Users and /Groups.
When I add a user to a pushed group, I get an update about the group resource for adding this user as a member, but I never get an update about the 'user' resource for adding the group to his 'groups' attribute.
I tried a lot of scenarios but I never get a value in the groups attribute on a 'user' resource. What did I miss? How can I get the user's group in the user resource?
Hi @ja336 (ja336) , Thank you for reaching out to the Okta Community!
In the case of Group Push, you have to consider the limitations:
" • Using the same Okta group for assignments and for group push is not supported. To maintain consistent group membership between Okta and the downstream app, you need to create a separate group that is configured to push groups to the target app.
"
https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-about-group-push.htm
Make sure that the app is properly assigned to the user in Okta (check Admin dashboard for any failed assignment tasks) via a Group dedicated for app assignments, then leverage a separate group for the Push. See if that changes the outcome.
Hope it helps!