scim provider: allow syncing only users or only groups #13441
Description
Describe the bug
I've set up SCIM for GitHub Organization. When I look at the SCIM provider I see a long Exception error. However, when I query the API or look in the GitHub console, SCIM has worked correctly!
To Reproduce
Steps to reproduce the behavior:
- Setup GitHub Organization SAML as documented at https://docs.goauthentik.io/integrations/services/github-organization/
- Create a fine-grained token with Write access to Organization Members
- Setup a SCIM provider with URLs as documented by GitHub https://docs.github.com/en/enterprise-cloud@latest/rest/scim/scim?apiVersion=2022-11-28#scim-provisioning-for-organizations
- Run a sync
- View SCIM mappings for each user by querying https://api.github.com/scim/v2/organizations/ORGNAME/Users confirms that the users are synced
- View invitations for users provisioned in Authentik but not active in GitHub in the console or https://api.github.com/scim/v2/organizations/ORGNAME/invitations
...
- Be utterly confused why Authentik logs only a NotFound exception in Sync Status
Logs
Expand to see JSON logs...
{"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 5521, "schema_name": "public", "task_id": "9c78603a-f0bb-4a99-a90b-6b75962ce2b1", "task_name": "scim_sync_objects", "timestamp": "2025-03-08T18:34:27.202935"}
{"domain_url": null, "event": "failed to get ServiceProviderConfig", "exc": "NotFoundSyncException(<Response [404]>)", "level": "warning", "logger": "authentik.lib.sync.outgoing.base", "pid": 5521, "provider": "GitHub SCIM", "schema_name": "public", "task_id": "task-9c78603af0bb4a99a90b6b75962ce2b1", "timestamp": "2025-03-08T18:34:27.417693"}
{"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 5521, "schema_name": "public", "state": "SUCCESS", "task_id": "9c78603af0bb4a99a90b6b75962ce2b1", "task_name": "scim_sync_objects", "timestamp": "2025-03-08T18:34:31.940549"}
{"domain_url": null, "event": "Task published", "level": "info", "logger": "authentik.root.celery", "pid": 5523, "schema_name": "public", "task_id": "9b93b6344f974311bcab66c1ae7f7e6c", "task_name": "authentik.providers.scim.tasks.scim_sync_objects", "timestamp": "2025-03-08T18:34:31.950457"}
{"domain_url": null, "event": "Task started", "level": "info", "logger": "authentik.root.celery", "pid": 5521, "schema_name": "public", "task_id": "9b93b634-4f97-4311-bcab-66c1ae7f7e6c", "task_name": "scim_sync_objects", "timestamp": "2025-03-08T18:34:31.954312"}
{"domain_url": null, "event": "failed to get ServiceProviderConfig", "exc": "NotFoundSyncException(<Response [404]>)", "level": "warning", "logger": "authentik.lib.sync.outgoing.base", "pid": 5521, "provider": "GitHub SCIM", "schema_name": "public", "task_id": "task-9b93b6344f974311bcab66c1ae7f7e6c", "timestamp": "2025-03-08T18:34:32.123067"}
{"event": "Task authentik.providers.scim.tasks.scim_sync_objects[9b93b634-4f97-4311-bcab-66c1ae7f7e6c] raised unexpected: NotFoundSyncException(<Response [404]>)", "exception": [{"exc_type": "NotFoundSyncException", "exc_value": "<Response [404]>", "frames": [{"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/app/trace.py", "lineno": 453, "locals": {"I": "None", "IGNORE_STATES": "frozenset({'REJECTED', 'RETRY', 'IGNORED'})", "Info": "<class 'celery.app.trace.TraceInfo'>", "R": "None", "Rstr": "None", "T": "None", "_does_info": "False", "app": "<CeleryApp authentik at 0x7f6569915c70>", "args": "['authentik.core.models.Group', 1, 12]", "deduplicate_successful_tasks": "False", "eager": "False", "exc": "NotFoundSyncException(<Response [404]>)", "fun": "'<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f656'+8", "hostname": "'celery@de9193d23122'", "inherit_parent_priority": "False", "kwargs": "{}", "loader_cleanup": "'<bound method BaseLoader.on_process_cleanup of <celery.loaders.app.AppLoader obj'+23", "loader_task_init": "'<bound method BaseLoader.on_task_init of <celery.loaders.app.AppLoader object at'+17", "monotonic": "<built-in function monotonic>", "name": "'authentik.providers.scim.tasks.scim_sync_objects'", "on_error": "<function build_tracer.<locals>.on_error at 0x7f655f9a4540>", "pid": "5521", "pop_request": "'<bound method _LocalStack.pop of <celery.utils.threads._LocalStack object at 0x7'+13", "pop_task": "'<bound method _LocalStack.pop of <celery.utils.threads._LocalStack object at 0x7'+13", "postrun_receivers": "\"[(('tenant_schemas_restore_schema', 140073676915104), <weakref at 0x7f6569279bc0\"+282", "prerun_receivers": "\"[(('tenant_schemas_switch_schema', 140073676915104), <weakref at 0x7f6569279990;\"+279", "publish_result": "True", "push_request": "'<bound method _LocalStack.push of <celery.utils.threads._LocalStack object at 0x'+14", "push_task": "'<bound method _LocalStack.push of <celery.utils.threads._LocalStack object at 0x'+14", "redelivered": "False", "request": "\"{'lang': 'py', 'task': 'authentik.providers.scim.tasks.scim_sync_objects', 'id':\"+1475", "resultrepr_maxsize": "1024", "retval": "None", "root_id": "'6b6bba6e-fedd-4c9b-80ab-666e120ca32f'", "signature": "<function maybe_signature at 0x7f656a0cf100>", "state": "None", "success_receivers": "[]", "task": "'<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f656'+8", "task_after_return": "None", "task_before_start": "None", "task_on_success": "None", "task_priority": "None", "task_request": "\"<Context: {'lang': 'py', 'task': 'authentik.providers.scim.tasks.scim_sync_objec\"+1546", "time_start": "4272756.045713584", "trace_ok_t": "<class 'celery.app.trace.trace_ok_t'>", "track_started": "False", "uuid": "'9b93b634-4f97-4311-bcab-66c1ae7f7e6c'"}, "name": "trace_task"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/utils.py", "lineno": 1783, "locals": {"args": "'(<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f65'+48", "integration": "<class 'sentry_sdk.integrations.celery.CeleryIntegration'>", "kwargs": "{}", "original_function": "'<function _install_stack_protection.<locals>.__protected_call__ at 0x7f656e6ded4'+2", "sentry_patched_function": "<function _wrap_task_call.<locals>._inner at 0x7f6560c032e0>"}, "name": "runner"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/integrations/celery/__init__.py", "lineno": 415, "locals": {"args": "'(<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f65'+48", "exc_info": "\"(<class 'authentik.lib.sync.outgoing.exceptions.NotFoundSyncException'>, NotFoun\"+71", "f": "'<function _install_stack_protection.<locals>.__protected_call__ at 0x7f656e6ded4'+2", "kwargs": "{}", "latency": "0.010670185089111328", "span": "\"<Span(op='queue.process', description:'authentik.providers.scim.tasks.scim_sync_\"+161", "task": "'<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f656'+8"}, "name": "_inner"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/utils.py", "lineno": 1718, "locals": {"tb": "<traceback object at 0x7f655f30c280>", "tp": "<class 'authentik.lib.sync.outgoing.exceptions.NotFoundSyncException'>", "value": "NotFoundSyncException(<Response [404]>)"}, "name": "reraise"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/integrations/celery/__init__.py", "lineno": 410, "locals": {"args": "'(<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f65'+48", "exc_info": "\"(<class 'authentik.lib.sync.outgoing.exceptions.NotFoundSyncException'>, NotFoun\"+71", "f": "'<function _install_stack_protection.<locals>.__protected_call__ at 0x7f656e6ded4'+2", "kwargs": "{}", "latency": "0.010670185089111328", "span": "\"<Span(op='queue.process', description:'authentik.providers.scim.tasks.scim_sync_\"+161", "task": "'<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f656'+8"}, "name": "_inner"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/app/trace.py", "lineno": 736, "locals": {"args": "('authentik.core.models.Group', 1, 12)", "kwargs": "{}", "orig": "<function Task.__call__ at 0x7f656a0d14e0>", "req": "\"<Context: {'lang': 'py', 'task': 'authentik.providers.scim.tasks.scim_sync_objec\"+1546", "self": "'<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f656'+8", "stack": "<celery.utils.threads._LocalStack object at 0x7f65697d5e50>"}, "name": "__protected_call__"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/app/autoretry.py", "lineno": 38, "locals": {"args": "('authentik.core.models.Group', 1, 12)", "autoretry_for": "(<class 'authentik.lib.sync.outgoing.exceptions.TransientSyncException'>,)", "dont_autoretry_for": "()", "kwargs": "{}", "retry_backoff": "1.0", "retry_backoff_max": "600", "retry_jitter": "True", "retry_kwargs": "{}", "task": "'<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f656'+8"}, "name": "run"}, {"filename": "/authentik/providers/scim/tasks.py", "lineno": 14, "locals": {"args": "('authentik.core.models.Group', 1, 12)", "kwargs": "{}"}, "name": "scim_sync_objects"}, {"filename": "/authentik/lib/sync/outgoing/tasks.py", "lineno": 131, "locals": {"_object_type": "<class 'authentik.core.models.Group'>", "client": "'<authentik.providers.scim.clients.groups.SCIMGroupClient object at 0x7f655f927c2'+2", "filter": "{}", "messages": "[]", "obj": "<Group: Group devx>", "object_type": "'authentik.core.models.Group'", "page": "1", "paginator": "<django.core.paginator.Paginator object at 0x7f655f925670>", "provider": "<SCIMProvider: SCIM Provider GitHub SCIM>", "provider_pk": "12", "self": "<authentik.lib.sync.outgoing.tasks.SyncTasks object at 0x7f6562a22480>"}, "name": "sync_objects"}, {"filename": "/authentik/lib/sync/outgoing/base.py", "lineno": 63, "locals": {"connection": "None", "obj": "<Group: Group devx>", "self": "'<authentik.providers.scim.clients.groups.SCIMGroupClient object at 0x7f655f927c2'+2"}, "name": "write"}, {"filename": "/authentik/providers/scim/clients/groups.py", "lineno": 92, "locals": {"group": "<Group: Group devx>", "scim_group": "\"Group(id=None, displayName='devx', members=[GroupMember(value='ed5d1222-fc47-11e\"+156", "self": "'<authentik.providers.scim.clients.groups.SCIMGroupClient object at 0x7f655f927c2'+2"}, "name": "create"}, {"filename": "/authentik/providers/scim/clients/base.py", "lineno": 73, "locals": {"kwargs": "\"{'json': {'displayName': 'devx', 'members': [{'value': 'ed5d1222-fc47-11ef-8ba2-\"+131", "method": "'POST'", "path": "'/Groups'", "response": "<Response [404]>", "self": "'<authentik.providers.scim.clients.groups.SCIMGroupClient object at 0x7f655f927c2'+2"}, "name": "_request"}], "is_cause": false, "syntax_error": null}], "level": "error", "logger": "celery.app.trace", "timestamp": 1741458873.4280953}
{"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 5521, "schema_name": "public", "state": "FAILURE", "task_id": "9b93b6344f974311bcab66c1ae7f7e6c", "task_name": "scim_sync_objects", "timestamp": "2025-03-08T18:34:33.430957"}
{"action": "system_task_exception", "client_ip": null, "context": {"message": "Task scim_sync encountered an error: Traceback (most recent call last):\n File \"/ak-root/venv/lib/python3.12/site-packages/celery/app/trace.py\", line 453, in trace_task\n R = retval = fun(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^\n File \"/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/utils.py\", line 1783, in runner\n return sentry_patched_function(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/integrations/celery/__init__.py\", line 415, in _inner\n reraise(*exc_info)\n File \"/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/utils.py\", line 1718, in reraise\n raise value\n File \"/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/integrations/celery/__init__.py\", line 410, in _inner\n return f(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^\n File \"/ak-root/venv/lib/python3.12/site-packages/celery/app/trace.py\", line 736, in __protected_call__\n return self.run(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/ak-root/venv/lib/python3.12/site-packages/celery/app/autoretry.py\", line 38, in run\n return task._orig_run(*args, **kwargs)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/authentik/providers/scim/tasks.py\", line 22, in scim_sync\n return sync_tasks.sync_single(self, provider_pk, scim_sync_objects)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/authentik/lib/sync/outgoing/tasks.py\", line 98, in sync_single\n ).get():\n ^^^^^\n File \"/ak-root/venv/lib/python3.12/site-packages/celery/result.py\", line 251, in get\n return self.backend.wait_for_pending(\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/ak-root/venv/lib/python3.12/site-packages/celery/backends/asynchronous.py\", line 223, in wait_for_pending\n return result.maybe_throw(callback=callback, propagate=propagate)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/ak-root/venv/lib/python3.12/site-packages/celery/result.py\", line 365, in maybe_throw\n self.throw(value, self._to_remote_traceback(tb))\n File \"/ak-root/venv/lib/python3.12/site-packages/celery/result.py\", line 358, in throw\n self.on_ready.throw(*args, **kwargs)\n File \"/ak-root/venv/lib/python3.12/site-packages/vine/promises.py\", line 235, in throw\n reraise(type(exc), exc, tb)\n File \"/ak-root/venv/lib/python3.12/site-packages/vine/utils.py\", line 27, in reraise\n raise value\nauthentik.lib.sync.outgoing.exceptions.NotFoundSyncException: <Response [404]>"}, "domain_url": null, "event": "Created Event", "level": "info", "logger": "authentik.events.models", "pid": 5523, "schema_name": "public", "task_id": "task-6b6bba6efedd4c9b80ab666e120ca32f", "timestamp": "2025-03-08T18:34:33.796304", "user": {}}
{"event": "Task authentik.providers.scim.tasks.scim_sync[6b6bba6e-fedd-4c9b-80ab-666e120ca32f] raised unexpected: NotFoundSyncException('<Response [404]>')", "exception": [{"exc_type": "NotFoundSyncException", "exc_value": "<Response [404]>", "frames": [{"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/app/trace.py", "lineno": 453, "locals": {"I": "None", "IGNORE_STATES": "frozenset({'REJECTED', 'RETRY', 'IGNORED'})", "Info": "<class 'celery.app.trace.TraceInfo'>", "R": "None", "Rstr": "None", "T": "None", "_does_info": "False", "app": "<CeleryApp authentik at 0x7f6569915c70>", "args": "[12]", "deduplicate_successful_tasks": "False", "eager": "False", "exc": "NotFoundSyncException('<Response [404]>')", "fun": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>", "hostname": "'celery@de9193d23122'", "inherit_parent_priority": "False", "kwargs": "{}", "loader_cleanup": "'<bound method BaseLoader.on_process_cleanup of <celery.loaders.app.AppLoader obj'+23", "loader_task_init": "'<bound method BaseLoader.on_task_init of <celery.loaders.app.AppLoader object at'+17", "monotonic": "<built-in function monotonic>", "name": "'authentik.providers.scim.tasks.scim_sync'", "on_error": "<function build_tracer.<locals>.on_error at 0x7f6560c036a0>", "pid": "5523", "pop_request": "'<bound method _LocalStack.pop of <celery.utils.threads._LocalStack object at 0x7'+13", "pop_task": "'<bound method _LocalStack.pop of <celery.utils.threads._LocalStack object at 0x7'+13", "postrun_receivers": "\"[(('tenant_schemas_restore_schema', 140073676915104), <weakref at 0x7f6569279bc0\"+282", "prerun_receivers": "\"[(('tenant_schemas_switch_schema', 140073676915104), <weakref at 0x7f6569279990;\"+279", "publish_result": "True", "push_request": "'<bound method _LocalStack.push of <celery.utils.threads._LocalStack object at 0x'+14", "push_task": "'<bound method _LocalStack.push of <celery.utils.threads._LocalStack object at 0x'+14", "redelivered": "False", "request": "\"{'lang': 'py', 'task': 'authentik.providers.scim.tasks.scim_sync', 'id': '6b6bba\"+1363", "resultrepr_maxsize": "1024", "retval": "None", "root_id": "'6b6bba6e-fedd-4c9b-80ab-666e120ca32f'", "signature": "<function maybe_signature at 0x7f656a0cf100>", "state": "None", "success_receivers": "[]", "task": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>", "task_after_return": "'<bound method SystemTask.after_return of <@task: authentik.providers.scim.tasks.'+42", "task_before_start": "'<bound method SystemTask.before_start of <@task: authentik.providers.scim.tasks.'+42", "task_on_success": "None", "task_priority": "None", "task_request": "\"<Context: {'lang': 'py', 'task': 'authentik.providers.scim.tasks.scim_sync', 'id\"+1591", "time_start": "4272750.853103236", "trace_ok_t": "<class 'celery.app.trace.trace_ok_t'>", "track_started": "False", "uuid": "'6b6bba6e-fedd-4c9b-80ab-666e120ca32f'"}, "name": "trace_task"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/utils.py", "lineno": 1783, "locals": {"args": "'(<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70'+6", "integration": "<class 'sentry_sdk.integrations.celery.CeleryIntegration'>", "kwargs": "{}", "original_function": "'<function _install_stack_protection.<locals>.__protected_call__ at 0x7f656e6ded4'+2", "sentry_patched_function": "<function _wrap_task_call.<locals>._inner at 0x7f6560c03920>"}, "name": "runner"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/integrations/celery/__init__.py", "lineno": 415, "locals": {"args": "'(<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70'+6", "exc_info": "\"(<class 'authentik.lib.sync.outgoing.exceptions.NotFoundSyncException'>, NotFoun\"+73", "f": "'<function _install_stack_protection.<locals>.__protected_call__ at 0x7f656e6ded4'+2", "kwargs": "{}", "latency": "0.026908159255981445", "span": "\"<Span(op='queue.process', description:'authentik.providers.scim.tasks.scim_sync'\"+153", "task": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>"}, "name": "_inner"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/utils.py", "lineno": 1718, "locals": {"tb": "<traceback object at 0x7f656036ed40>", "tp": "<class 'authentik.lib.sync.outgoing.exceptions.NotFoundSyncException'>", "value": "NotFoundSyncException('<Response [404]>')"}, "name": "reraise"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/sentry_sdk/integrations/celery/__init__.py", "lineno": 410, "locals": {"args": "'(<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70'+6", "exc_info": "\"(<class 'authentik.lib.sync.outgoing.exceptions.NotFoundSyncException'>, NotFoun\"+73", "f": "'<function _install_stack_protection.<locals>.__protected_call__ at 0x7f656e6ded4'+2", "kwargs": "{}", "latency": "0.026908159255981445", "span": "\"<Span(op='queue.process', description:'authentik.providers.scim.tasks.scim_sync'\"+153", "task": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>"}, "name": "_inner"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/app/trace.py", "lineno": 736, "locals": {"args": "(12,)", "kwargs": "{}", "orig": "<function Task.__call__ at 0x7f656a0d14e0>", "req": "\"<Context: {'lang': 'py', 'task': 'authentik.providers.scim.tasks.scim_sync', 'id\"+1591", "self": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>", "stack": "<celery.utils.threads._LocalStack object at 0x7f6561475130>"}, "name": "__protected_call__"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/app/autoretry.py", "lineno": 38, "locals": {"args": "(12,)", "autoretry_for": "(<class 'authentik.lib.sync.outgoing.exceptions.TransientSyncException'>,)", "dont_autoretry_for": "()", "kwargs": "{}", "retry_backoff": "1.0", "retry_backoff_max": "600", "retry_jitter": "True", "retry_kwargs": "{}", "task": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>"}, "name": "run"}, {"filename": "/authentik/providers/scim/tasks.py", "lineno": 22, "locals": {"args": "()", "kwargs": "{}", "provider_pk": "12", "self": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>"}, "name": "scim_sync"}, {"filename": "/authentik/lib/sync/outgoing/tasks.py", "lineno": 98, "locals": {"groups_paginator": "<django.core.paginator.Paginator object at 0x7f65600d4170>", "lock_acquired": "True", "messages": "\"['Starting full provider sync', 'Syncing page 1 of users', 'Syncing page 1 of gr\"+6", "page": "1", "provider": "<SCIMProvider: SCIM Provider GitHub SCIM>", "provider_pk": "12", "self": "<authentik.lib.sync.outgoing.tasks.SyncTasks object at 0x7f6562a22480>", "sync_objects": "'<@task: authentik.providers.scim.tasks.scim_sync_objects of authentik at 0x7f656'+8", "task": "<@task: authentik.providers.scim.tasks.scim_sync of authentik at 0x7f6569915c70>", "users_paginator": "<django.core.paginator.Paginator object at 0x7f65600fdc40>"}, "name": "sync_single"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/result.py", "lineno": 251, "locals": {"EXCEPTION_STATES": "frozenset({'FAILURE', 'RETRY', 'REVOKED'})", "PROPAGATE_STATES": "frozenset({'FAILURE', 'REVOKED'})", "_on_interval": "<promise@0x7f655f8442d0>", "callback": "None", "disable_sync_subtasks": "True", "follow_parents": "True", "interval": "0.5", "no_ack": "True", "on_interval": "None", "on_message": "None", "propagate": "True", "self": "<AsyncResult: 9b93b634-4f97-4311-bcab-66c1ae7f7e6c>", "timeout": "None"}, "name": "get"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/backends/asynchronous.py", "lineno": 223, "locals": {"_": "None", "callback": "None", "kwargs": "\"{'timeout': None, 'interval': 0.5, 'on_interval': <promise@0x7f655f8442d0>, 'no_\"+31", "propagate": "True", "result": "<AsyncResult: 9b93b634-4f97-4311-bcab-66c1ae7f7e6c>", "self": "<celery.backends.redis.RedisBackend object at 0x7f655fb7dc40>"}, "name": "wait_for_pending"}, {"filename": "/ak-root/venv/lib/python3.12/site-packages/celery/result.py", "l
{"domain_url": null, "event": "Task finished", "level": "info", "logger": "authentik.root.celery", "pid": 5523, "schema_name": "public", "state": "FAILURE", "task_id": "6b6bba6efedd4c9b80ab666e120ca32f", "task_name": "scim_sync", "timestamp": "2025-03-08T18:34:33.825222"}
Version and Deployment (please complete the following information):
- authentik version: [e.g. 2025.2.0] 2025.2.1
- Deployment: [e.g. docker-compose, helm] podman quadlets (podman run by systemd)
Additional context
Add any other context about the problem here.
GitHub apparently doesn't provide the /ServiceProviderConfig which results in 404, is this perhaps being raised up as the sole error? Or is something else in the operation failing?