Error: SystemForCrossDomainIdentityManagementServiceIncompatible

Question

We are receiving the error below when adding a new user in Entra ID for SSO to AWS

SystemForCrossDomainIdentityManagementServiceIncompatible

Error message

StatusCode: BadRequest Message: Processing of the HTTP request resulted in an exception. Please see the HTTP response returned by the 'Response' property of this exception for details. Web Response: {"schema":["urn:ietf:params:scim:api:messages:2.0:Error"],"schemas":["urn:ietf:params:scim:api:messages:2.0:Error"],"detail":"name: The attribute name is required","status":"400","exceptionRequestId":"1930d11a-4c83-440d-b010-e18be5a60702","timeStamp":"2025-02-20 18:43:48.707"}. This operation was retried 1 times. It will be retried again after this date: 2025-02-21T00:43:48.7435805Z UTC

Answer 1

The error is returned from AWS, Entra is just displaying it to you. The relevant part of the error is:

"name: The attribute name is required"

Based on that.. whatever attribute(s) are mapped to the name sub-attributes (likely some combination of name.givenName, name.familyName, and name.formatted..) are empty on this Entra user, meaning no value is flowing from Entra -> AWS for that attribute.