Troubleshooting Group Push

The most important concept to understand in pushing groups is that pushed groups are managed from Okta. Making changes from the target app causes a misalignment with Okta and creates a number of problems. Some can be diagnosed through the Errors page, while others may not.

When an error occurs, alerts display a red error panel and menu of possible issues.

  • The red Information button displays the "time of failure" details and the probable cause.

  • The Retry All Groups button allows you to simultaneously re-push the groups after making corrections.

Users shown as inactive in Okta are not pushed to the downstream app. Inactive users must be reactivated and then the group re-pushed. If the inactive user is part of more than one group, they must be re-pushed to all groups in which they are members.


If you have successfully pushed a group to the target app but the assigned group members do not appear, verify that one of the following is true:

  • The target app has been added to the new group.
  • All group members of the new group are assigned to the target app (even if the group itself was not yet assigned).
  • All group members appear as users in the target app.
  • The group you pushed is not the same one you used to assign and provision users to the app.

If some group members are assigned to the target app and others are not, only successfully assigned members will appear in the target app.


Verify that the group you pushed is not the same one you used to assign and provision users to the app. Using the same Okta group for assignments and for group push is not currently supported.


To recover, you must delete the pushed group and reinstate the target app memberships.

  1. Click the Active / Inactive status button and choose Delete pushed group in app.
  2. Choose the Leave the group in the target app option.
  3. Run an import from the target app.
  4. Retry the push.