Okta SCIM provisioning attribute mapping limit of 100 per rule

Answer

Okta's SCIM 2.0 provisioning engine treats the 100-attribute ceiling as a hard limit. When you try to create or update a provisioning rule that contains more than 100 attribute mappings, the API returns a 400 Bad Request response with a validation error indicating the limit has been exceeded. The rule is not created or updated, and there is no silent truncation.

Confirmed facts

• The limit applies equally to Free, Professional, and Enterprise editions; no edition-based variation has been documented.
• Exceeding the limit triggers a validation error, so the request fails before the rule is persisted.
• To work around the limit, you can create multiple provisioning rules that each contain a subset of the attributes (<=100 per rule). Okta evaluates all active rules for a user and merges their results, preserving mapping integrity as long as attribute names do not overlap across rules.
• If the same attribute appears in more than one rule, the later-evaluated rule overwrites the earlier value, so conflict-free partitioning (e.g., grouping unrelated attributes per rule) is required.

Steps to stay within the limit

1. Count the attributes you need to map in a single rule.
2. If the count <= 100, create the rule normally via the SCIM Provisioning API or Okta admin UI.
3. If the count > 100, partition the attribute list into groups of <= 100 (e.g., first 100, next 100, ...).
4. For each group, POST a provisioning rule payload targeting the same SCIM endpoint, ensuring each rule has a unique name.
5. Verify that no attribute name appears in more than one rule; if overlap is unavoidable, decide which rule should supply the final value and order the rules accordingly.
6. After all rules are active, test provisioning a test user and confirm that all expected attributes are present with the correct values.

If you observe a different error code or behavior, please share the exact HTTP status and response body from your Okta sandbox so the recommendation can be refined.