Ask Questions and Find Answers

When a NewUser (which does not yet exist on the LCP API database) attempts to login to the SSO for the first time, they'll get a 400 error on the IdP side because Okta won't have all of the data it needs to automatically create the user. Instead, the NewUser should create an account on LCP first (via Console) and _then_ attempt to login via SSO. This will provide the data created on the LCP API database during user creation to Okta so that the new IdP user can be created JIT.