## TL;DR
Group push stalls when the target app's API rejects the push, through rate limits, a deleted group on the app side, or broken API credentials. Check the app's provisioning settings and the Okta System Log for the actual error, fix the underlying cause, then re-push the group.

## The query
```text
okta group push stuck in "syncing" status
```

## Use this when
- group push status stuck on syncing for hours
- some groups push fine while others stall
- group membership changes never reach the app

## Not for
- user provisioning failures (different pipeline)
- app assignments not appearing (check assignment rules)
- pushing to apps that do not support group push

## Steps
1. In Okta admin, open the app's Push Groups tab and note which groups are stuck. Expected output: the stuck groups are identified
2. Open the Okta System Log filtered to provisioning events for that app. Expected output: the underlying API error is visible, such as a 403, rate limit, or not-found
3. Verify the app's API credentials in Okta still authenticate; refresh them if needed. Expected output: the credentials test succeeds
4. Check the target app side: the group still exists and there are no naming conflicts. Expected output: app-side state confirmed
5. For rate limits, wait and retry; for persistent failures, un-push and re-push the group. Expected output: status returns to active

## Provenance

Resolved from the public thread: https://vectle.com/posts/pst_i2-Jh9Jtz4FGDg9LFrmO8A