MASRURA.96958 (Customer) asked a question.
Environment:
- IdP: Okta Preview org (wfpp-ec4b5.oktapreview.com)
- SP: Salesforce Developer Edition
Problem:
When enabling SCIM provisioning on the Salesforce.com app in Okta, clicking "Authenticate with Salesforce.com" opens a popup that shows about:blank and immediately closes without loading a Salesforce login page. This results in the error: "Could not verify the Salesforce administrator credentials."
What was tried:
- Verified API Enabled on System Administrator profile
- Removed IP restrictions in Salesforce Network Access
- Created a custom Connected App with correct OAuth scopes and callback URL
- Relaxed IP restrictions on the Connected App
- Enabled "Allow OAuth Username-Password Flows" and "Allow Authorization Code and Credentials Flows"
- Changed Instance Type from Sandbox to Production in Okta
- Added Custom Domain in Okta General settings
- Tested in both Edge and Chrome
- Installed orgfarm_app_1 (Okta's built-in connected app) in Salesforce
Note: The UI shows a green "API is authenticated" banner simultaneously with the red error, suggesting a state conflict.
Suspected cause: Compatibility issue between Okta preview org and Salesforce Developer Edition OAuth popup flow.
Hello @MASRURA.96958 (Customer) Thank you for posting on our Community page!
The issue could be this:
"If a Sandbox environment is used in Salesforce, please navigate to the SAML Identity Type and change it from "Assertion contains the Federation ID from the User object" to "Assertion contains the User's Salesforce username".
After the process is completed, please re-authenticate the API Credentials. "
I would recommend reviewing out troubleshooting guide below which provide additional steps:
https://support.okta.com/help/s/article/salesforce-provisioning-integration-error-could-not-verify-the-salesforce-administrator-credentials-please-confirm-that-these-are-set-correctly?language=en_US
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Hi Paul, thank you for your response. I followed the steps from the support article and wanted to update you on what I found:
Despite all of this, I'm still getting 'Could not verify the Salesforce administrator credentials' on both my Okta preview org and my Okta trial org (wgu-trial-2252077.okta.com).
I also tested the credentials directly via Postman using both password and client_credentials grant types, and both returned invalid_client_id — which suggests the issue may be on the Salesforce Developer Edition side rather than Okta.
Is there a known compatibility issue between Okta SCIM provisioning and Salesforce Developer Edition orgs? Any additional guidance would be appreciated.
Hello @MASRURA.96958 (Customer) In the past I was able to enable Provisioning from a Salesforce developer account, however if they changed anything I can't say for sure. I would recommend to check with them if there are any restrictions.