Okta review campaign deadline extension failed: API validation error troubleshooting
Fixes an Okta review campaign deadline extension that fails with an API validation error by correcting the new end date, campaign state and request format. Use when a live campaign needs more time and the extension is rejected. Not for campaigns that already closed.
TL;DR
Check the campaign state and the exact date you are sending before you blame the API, because validation errors on extension are usually a past date, a closed campaign or a date format the endpoint rejects. Read the campaign current end date and state, choose a new end date clearly in the future in the tenant timezone, and send the update with the identifier and fields the governance endpoint expects. Confirm the new date in the console and tell reviewers, since an extension nobody hears about changes nothing.
Okta review campaign deadline extension failed: API validation error troubleshootingUse this when
- Extending a campaign deadline through the console or API returns a validation error.
- Reviewers need more time and the campaign end is near.
- A script that extended campaigns before fails after an Okta update or a tenant change.
Not for this skill when
- The campaign already closed or completed. Extensions do not reopen closed campaigns; plan a follow up campaign instead.
- You want to shorten a deadline. The same validation applies but communicate the cut clearly to reviewers.
Steps
- Open the campaign and record its current state, current end date with its timezone and the exact new date the extension attempt used. Verify: state, current date and attempted date are all recorded.
- Read the validation error response body in full rather than the summary line, noting which field it names, since the field tells you whether date, state or payload shape is at fault. Verify: the named field from the error body is captured.
- Confirm the new date is in the future relative to the tenant timezone and after the campaign start, and express it in the full date time format with an explicit offset that the endpoint examples use. Verify: the corrected date is future dated and correctly formatted.
- If the campaign state blocks edits, use the supported path for that state, such as editing through the console for an active campaign, and avoid forcing the change through an endpoint meant for drafts. Verify: the edit path matches the campaign state.
- Send the extension with only the fields that change, then read the campaign back and confirm the stored end date equals the intended date in the console display. Verify: the read back date matches the intention in both API and console.
- Notify all reviewers with open items about the new deadline through the campaign reminder function and a direct message to the busiest reviewers. Verify: reviewers confirm awareness of the new date.
- Record the old date, new date, reason and approver in the campaign evidence, since auditors will compare decision dates against the deadline that applied. Verify: the evidence shows both dates with the reason and approver.
Why it happens
Deadline extension looks trivial, which is why its failures surprise people: the endpoint validates the whole update, so a date that is valid in isolation can fail because the campaign state forbids the edit, the format drops the timezone, or the new date is accidentally in the past for the tenant timezone while still future for the sender. Reading the error body field and reading the campaign back after the change are the two habits that make extensions boring and reliable.
Variants and edge cases
Okta campaign end date will not update validation failed
The console phrasing. Copy the full error body; the summary hides the field that matters.
governance API extend certification deadline error
The API phrasing. Send only changed fields and a fully qualified date time value.
campaign deadline passed but reviewers still working
The late phrasing. If the state already closed, an extension may be impossible; check state before promising reviewers more time.
Edge cases to check before closing the review cycle:
- Timezones cause most silent date mistakes. State the timezone in every deadline communication.
- Extending also extends reminder schedules in some configurations. Check reminders so reviewers are not spammed daily until the new date.
- Repeated extensions weaken the control. Record a reason each time and expect auditor questions after the second.
Compatibility: Okta Identity Governance campaign management and APIs, campaign states and deadline handling.
Provenance
Resolved from the public thread: https://vectle.com/posts/pst_MCc66PxFQF023bjGED1FbQ