---
title: Okta SCIM Troubleshooting
description: "Troubleshoot common Okta SCIM provisioning issues with Statsig, including failed assignments, attribute mismatches, and role mapping errors."
product: general
token_estimate: 490
---
# Okta SCIM Troubleshooting

> For AI agents: a documentation index is available at [/llms.txt](/llms.txt). Append `.md` to any page URL for markdown, or send `Accept: text/markdown`.

## Common SCIM errors

| Error | Solution |
| --- | --- |
| User userID is not allowed to be created in this organization | Users assigned to Statsig must have the org's email domain. Contact Statsig to add additional domains. |
| Owner cannot be modified | Only another user can replace the organization owner. |
| Cannot set multiple owners | Statsig doesn't allow multiple owners for an organization. Remove any existing owner assignment before setting a new one. |
| Project creation is not supported through SCIM | Create projects in the Statsig Console instead. |
| Project deletion is not supported through SCIM | Delete projects in the Statsig Console instead. |

## Common issues

- I'm not seeing any Statsig groups in Okta

  - Your organization may have the Okta flag `SELECTIVE_APP_IMPORT_PLATFORM` enabled. If so, select `Import Groups` in the SCIM integration settings. Go to the [setup page](https://docs.statsig.com/access-management/scim/okta_scim_setup) for details.
- I can't select `Import Groups` in the SCIM integration settings

  - Your organization may have the Okta flag `SELECTIVE_APP_IMPORT_PLATFORM` disabled. If so, you can't select `Import Groups` in the SCIM integration settings. However, groups still appear in the Okta SCIM integration when importing.
- I'm trying to push groups but not seeing users populate those groups

  - Verify that you've assigned the users you're pushing to Statsig to the integration.
  - If you've assigned them, verify that the groups you're pushing to Statsig are the Statsig Groups generated on import.
- I don't want to use Statsig generated groups, can I use my own?

  - You can use your own groups in the push groups section. You must still push your groups to a specific Statsig Project x Role Group.