MikhailA.71081 (Customer) asked a question.
Best Way to Identify User(s) Causing Org2Org Push Group Errors
Hi everyone,
I’m looking for advice and best practices on identifying the root cause of Org2Org push group errors. Specifically, when push group syncs fail between tenants, what’s the most effective way to determine which user or users are causing the issue?
Has anyone developed a reliable method, report, or troubleshooting workflow for pinpointing these problematic users or mismatched attributes, profile status?
Any tips, tools, or approaches that have worked well in your environment would be greatly appreciated.
Thanks in advance for your insights!
— Mik
Hi @MikhailA.71081 (Customer) , Thank you for reaching out to the Okta Community!
Unfortunately, there currently is no out-of-the-box/quick way of identifying the user(s) causing the issue. Opening a ticket would be the way to go. Our colleagues from the Support team might be able to gleam some additional details from the back-end logs in addition to your system logs.
You can suggest a Feature Enhancement on the Okta Community page by going to the Community→ Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented.
More details here.
We'll leave this question open for community input as well, in case someone has additional experience/insight.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Collect them all. Learn a new skill and earn a new Okta Learning badge.
Just released: More Okta Community badges just added
One way would be to take an export of all users in the push group and compare them to the pushed group in the other org. The ones that are NOT in the pushed group (target group) will be your issue.
It's probably not attributes since the push groups only push membership not profiles.
There really isn't a report. you just have to check the group push errors on the push groups tab and work through them one by one. usually there are a series of patterns and can start to resolve them quickly once you figure out 1 or 2 patterns