Distinguish between requests coming from Azure and Okta

Question

During provisioning phase, what's a reliable way to distinguish between requests coming from Azure ActiveDirectory and Okta?

We're implementing SCIM and SSO in our app. To aid user UX, we would like to render better errors to users, for cases when they would like to log in using wrong SSO provider. For example, if users were provisioned from Okta and attempts to log in using Azure (don't know why would he do that – but still), we'd like to tell them to use Okta instead.

It appears as if I am missing something obvious, as am I failing to locate relevant topics (eg source / origin of the server) in the SCIM 2.0 protocol, as well as Azure/Okta documentation.

Answer 1

That would be your SCIM connector's responsibility to capture originating call by IP to understand which system created this user. So you need to look at that direction, to add an additional attribute in your system depending on the SCIM caller's IP