Troubleshoot: Email Address Change in Okta

Updating a user’s email address in Okta can break the user’s sync to JumpCloud due to the way Okta sends the username to JumpCloud.

Symptoms

The Okta JumpCloud SCIM integration sends the local half of the email address to JumpCloud as a username. When the email address is updated in Okta, it will attempt to send the update to the user in JumpCloud. If a user in JumpCloud is bound to existing resources in JumpCloud this update will fail with the following error in Okta:

Error while trying to push profile update for ‘Username’: Bad Request. Errors reported by remote server: rpc error: code = InvalidArgument desc = The username cannot be modified because the user is bound to one or more resources. Please fix this on the Tasks Page

Resolution

To resolve this you will need to create a manual override for the user’s username in Oka.

From your Okta Administration Console:

1. Navigate to Applications > Applications
2. From the Applications Page, open the JumpCloud application.
3. Find the affected user and click the Pencil icon to edit the user’s details.
4. Manually override the username to match the correct username in JumpCloud and click Save.