Share all details related to your problem, including any error messages you may have received.
Context:
We have Sailpoint and OKTA in our IAM solution.
There is an end-user application, this application will create OKTA users with a specific group and profile.userType=“CMBHS-External”
Now, in Sailpoint , we are trying to get a subset of OKTA users those with profile.userType=“CMBHS-External” and use it as authorized application.
So, I configured the OKTA connector with
USER FILTER: profile.userType eq “CMBHS-External”
But that is failing with error
2024-01-23T17:24:50,476 WARN QuartzScheduler_Worker-3 openconnector.connector.okta.OktaConnector:6410 - Failed Request URL: https://txhhscdev.oktapreview.com/api/v1/users?limit=200&filter=profile.userType+eq+“CMBHS_External”
2024-01-23T17:24:50,476 WARN QuartzScheduler_Worker-3 openconnector.connector.okta.OktaConnector:6411 - Okta Request ID: x-okta-request-id: 0c85186119f9492668e7719ef9cbdeda
2024-01-23T17:24:50,477 ERROR QuartzScheduler_Worker-3 openconnector.connector.okta.OktaConnector:693 - Aggregation failed for account.
openconnector.InvalidConfigurationException: [ InvalidConfigurationException ]
[ Possible suggestions ] Ensure the ‘Filter Condition for Account’ is valid. The Filter Condition for Account is ‘profile.userType eq “CMBHS_External”’.
[ Error details ] Request execution failed. HTTP Error code : 400, Okta Error code : E0000031, errorSummary : Invalid search criteria., errorCauses:.
Documentation says I can query using any custom attribute
Hi @udaya1,
Without filter are you able to aggregate all the users ? If yes then check what is resource object coming for the user type for the aggregated users which you have mentioned.
I don’t know why they have mentioned like this. I would strongly suggest you raise a support ticket with Sailpoint as Okta never supports custom attribute with Filter.