FedericoF.58929 (Customer) asked a question.
JIT user creation failure on AAD SAML integration
Hello,
I've setup SAML integration between my Okta org and Azure AD. Currently, when I try to login as a new user (from Okta's perspective) I get a "GENERAL_NONSUCCESS" message in the login page. Looking at the logs, these 3 errors appear in rapid succession:
I have followed this tutorial to get started https://help.okta.com/en-us/Content/Topics/Provisioning/azure/azure-integrate-main.htm but it still doesn't work. I can login just fine if the user exists in both Okta and AAD, but if I want the integration to create a new user in Okta I get the failure shown previously.
Thanks.
Is it possible miss some attriube which is required. such as firstname and lastname.
Hi, thank you for your reply. I've setup the attributes and the mappings in both Azure and Okta. How do I make sure that all the required information is sent between the two?
Thanks
could you provide the full log of these three error message in the system log?
Here's the full CSV log of the past few days' attempts. The user trying to login with JIT is shiri.xriver_outlook.com#EXT#@shirixriveroutlook.onmicrosoft.com.
Thanks!
syslog_query(2)
It seems there are no more useful error message.
Thank you for your help. Unfortunately manually provisioning users won't work for our use case, we'll keep looking for a solution.
Thanks!