We're encountering an issue where automatic provisioning for new hires in Google Workspace via Okta fails consistently. The error message I'm seeing is: 'Automatic provisioning failed: Failed to remove license 1012220026. Combination of product and SKU is invalid or the product has auto-assigned feature enabled.' I believe that I should be able to turn off automatic provisioning on the Google side to allow Okta to manage everything without conflicts. Currently, when a new employee joins, they don't get assigned the Google Workspace app in Okta. I've searched through the Google Admin portal but can't find any option to disable automatic provisioning for Google Workspace Enterprise. In the 'Billing > License settings', I only see the Google Voice Standard option, and I thought Google Workspace would also be listed there. We have just one organizational unit, so I can't find a 'License settings' option. Additionally, in the 'Subscriptions' section, where we get our Google Workspace Enterprise licenses, there's no automatic provisioning option either. Any suggestions on how to resolve this? Right now, I have to manually assign everything through 'Okta > Tasks > App assignments.' It seems like when users activate their Okta accounts, their Google accounts are created first which leads to the provisioning failures when licenses are assigned afterward.
2 Answers
You might want to check if there’s a setting in the Google Admin console specific to your account type. It’s frustrating when things don’t work out of the box. Have you considered opening a support ticket with Google to get this sorted? They might have insights specific to your deployment.
Have you thought about contacting Okta support? They're paid to help with exactly these types of issues. Also, if you're using SCIM for provisioning, there can be so many settings that can mess things up. Sometimes, you can run into conflicts where deprovisioning isn't possible depending on how you set it up. If you’re already paying for SCIM, it’s definitely worth reaching out to them for help.
I haven’t yet. I guess I should do that to see if there’s something I’ve overlooked!