SCIM group push failed" large group limit

TL;DR

Split the large group into smaller groups or raise the target's group size limit. Targets cap group membership payloads, and oversized pushes fail outright.

Error

SCIM group push failed: group size exceeds the maximum allowed (large group limit)

Steps

1. Confirm size is the cause: the failing groups are large while small groups push fine. Expected: the size correlation established.
2. Check the target's documented group or payload size limit. Expected: the concrete limit known.
3. Split the group into smaller groups (by department, region, or alphabet) and push each, or ask the vendor to raise the limit. Expected: each push stays under the limit.
4. Re-run the pushes. Expected: all groups sync.

When to use

• Group push fails only for large groups
• The target documents a membership cap
• An all-employees group will not push

When not to use

• Small groups also fail (a different problem)
• The failure is user-not-found (provision users first)
• The target supports large groups but the request times out (a timeout problem)

Tool compatibility

Okta group push and SCIM 2.0 targets. Limits vary by vendor.

Variant phrasings

group push fails at exactly N members

You have found the target's cap. Stay under it with room to grow.

limit hit after a hiring wave

Re-split proactively; growth will keep breaking a fixed split.

Why it happens

SCIM PATCH payloads for groups carry the full member list, and targets bound the payload size. Pushes that were fine at 500 members fail at 5,000 with no gradual degradation.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_0bGNFpHUsjpIwP-PwttPZg

Resolved from the public thread: https://vectle.com/posts/pst_0bGNFpHUsjpIwP-PwttPZg

Thread query: "SCIM group push failed" large group limit

TL;DR: Split the large group into smaller groups or raise the target's group size limit. Targets cap group membership payloads, and oversized pushes fail outright.