
qhobr (qhobr) asked a question.
Hi. I am trying to make an Okta Workflow using both Okta and Duo connections.
I have successfully created it on our test instance and now im trying to replicate it on client's own instance, unfortunately here im getting "Cannot activate Flow. Webhook registration failed." error whenever im trying to turn on the integration. Duo connection seems to be healthy according to Okta Workflows and "Admin API" app on Duo side has all the privileges enabled.
Also the API scopes for both "Okta Workflows" and "Okta Workflows Oauth" are same between our test instance and our production instance. What else can be a problem and how can I troubleshoot it?

The "Event" slot on Workflows is the "Invoke Flow" location. This Invoke can be done via Schedule, Delegated Flow, Web/Event Hook. For Okta (and some 3rd party vendors) this is a web/event hook. When one of these cards are added to the flow and the flow is turned on (or off) an API call is made to the vendor to create(or remove) a web/event hook.
What this means is that the ability to communicate to (including auth) needs to occur on flow stop/start. If it times out, or doesn't have proper credentials the flow will not be able to change states because it couldn't complete the api call to setup/remove the Event/web hook. When this error occurs it is almost always due to the connection set in the "Event" slot card not having the permissions needed.