Okta Error "We Found Some Errors. Please Review the Form and Make Corrections" When Updating a SAML Attribute Statement

An unsupported push status for the username mapping causes an API validation error when updating a Security Assertion Markup Language (SAML) attribute statement.

When attempting to save changes to the SAML attribute statement, Okta generates the following error message:

We found some errors. Please review the form and make corrections.

Inspecting the network traffic using browser developer tools reveals the exact error details in the API response:

{
  "errorCode": "E0000001",
  "errorSummary": "Api validation failed: userNameMappingPushStatus",
  "errorLink": "E0000001",
  "errorId": "redacted",
  "errorCauses": [
    {
      "errorSummary": "userNameMappingPushStatus: Only push status of PUSH is supported for userName mapping when rule is not custom."
    }
  ]
}

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Security Assertion Markup Language (SAML) Applications

The application username format uses a non-custom rule while attempting to perform an unsupported push status operation. Okta only supports a push status of PUSH for username mapping when the rule is not custom.

How is the SAML attribute statement error resolved?

Update the application username format to a custom rule and specify the appropriate Okta username value to resolve the validation error.

1. Navigate to the Admin Console.
2. Go to Applications and select Applications.
3. Select the affected SAML application.
4. Navigate to the Sign On tab.
5. Select Edit in the Settings section.
6. Locate the Application username format dropdown menu.
7. Choose Custom.
8. Enter the desired Okta username expression in the provided field (for example, enter user.login for the Okta username or user.email for the email address).
9. Select Save.

NOTE: Refresh the page after saving the changes to ensure the updated username format applies correctly.