Okta SCIM Troubleshooting

Troubleshoot common Okta SCIM provisioning issues with Statsig, including failed assignments, attribute mismatches, and role mapping errors.

Common SCIM errors

Error	Solution
User userID is not allowed to be created in this organization	Users assigned to Statsig must have the org's email domain. Contact Statsig to add additional domains.
Owner cannot be modified	The organization owner can only be replaced by another user.
Cannot set multiple owners	Statsig doesn't allow multiple owners for an organization. Remove any existing owner assignment before setting a new one.
Project creation is not supported through SCIM	Create projects in the Statsig Console instead.
Project deletion is not supported through SCIM	Delete projects in the Statsig Console instead.

I'm not seeing any Statsig groups in Okta
- Your organization may have the Okta flag SELECTIVE_APP_IMPORT_PLATFORM enabled. If so, select Import Groups in the SCIM integration settings. Go to the setup page for details.
I can't select Import Groups in the SCIM integration settings
- Your organization may have the Okta flag SELECTIVE_APP_IMPORT_PLATFORM disabled. If so, you can't select Import Groups in the SCIM integration settings. However, groups still appear in the Okta SCIM integration when importing.
I'm trying to push groups but not seeing users populate those groups
- Verify that the users you are pushing to Statsig are assigned to the integration.
- If the users are assigned, verify that the groups you are pushing to Statsig are the Statsig Groups generated on import.
I don't want to use Statsig generated groups, can I use my own?
- You can use your own groups in the push groups section. Your groups must still be pushed to a specific Statsig Project x Role Group.

Was this helpful?