Temporary User Promotion - Doesn't work when using Okta as IdP

[sanfordbanks]

While testing the Temporary User Promotion feature I noticed that nothing happens when clicking the option in the menu bar. I have various attributes set as far as UserPromotionRole, UserPromotionReason, UserPromotionChoices. Any thoughts?

Running on JC 2.37.0. 

com.jamf.connect plist

Expand

<dict>
<key>Appearance</key>
<dict>
<key>MenubarIcon</key>
<string>********************</string>
<key>MenubarIconDark</key>
<string>*******************</string>
<key>ShowWelcomeWindow</key>
<false/>
</dict>
<key>CustomMenuItems</key>
<dict>
<key>getsoftware</key>
<string>Self Service</string>
</dict>
<key>HiddenMenuItems</key>
<array>
<string>preferences</string>
<string>quit</string>
</array>
<key>IdPSettings</key>
<dict>
<key>OktaAuthServer</key>
<string>***************</string>
<key>Provider</key>
<string>Okta</string>
</dict>
<key>TemporaryUserPermissions</key>
<dict>
<key>TemporaryUserPromotion</key>
<true/>
<key>UserPromotionDuration</key>
<integer>360</integer>
<key>UserPromotionLimit</key>
<integer>10</integer>
<key>UserPromotionReason</key>
<true/>
<key>UserPromotionChoices</key>
<array>
<string>"General Use"</string>
<string>"I want it"</string>
<string>"Approved"</string>
</array>
<key>UserPromotionRole</key>
<array>
<dict>
<key>Duration</key>
<integer>360</integer>
<key>Name</key>
<string>**************</string>
</dict>
</array>
<key>UserPromotionTimer</key>
<true/>
<key>VerifyUserPromotion</key>
<true/>
</dict>
<key>PasswordPolicies</key>
<dict>
<key>CheckOnNetworkChange</key>
<true/>
<key>ExpirationCountdownStartDay</key>
<integer>**</integer>
<key>ExpirationNotificationStartDay</key>
<integer>**</integer>
<key>NetworkCheck</key>
<integer>**</integer>
<key>PolicyRequirements</key>
<dict/>
<key>SyncPasswordsMessage</key>
<string>Your macOS password is not the same as your OKTA Password, please sync them.</string>
</dict>
<key>SignIn</key>
<dict>
<key>AutoAuthenticate</key>
<true/>
<key>AutoOpenAppAtLogin</key>
<true/>
</dict>
<key>UserHelp</key>
<dict>
<key>HelpOptions</key>
<string>***************</string>
<key>HelpType</key>
<string>URL</string>
</dict>
<key>WebBrowser</key>
<dict>
<key>BrowserSelection</key>
<string>Google Chrome</string>
<key>LaunchBrowser</key>
<true/>
</dict>
</dict>
</plist>

[sanfordbanks]

<dict>
<key>Appearance</key>
<dict>
<key>MenubarIcon</key>
<string>********************</string>
<key>MenubarIconDark</key>
<string>*******************</string>
<key>ShowWelcomeWindow</key>
<false/>
</dict>
<key>CustomMenuItems</key>
<dict>
<key>getsoftware</key>
<string>Self Service</string>
</dict>
<key>HiddenMenuItems</key>
<array>
<string>preferences</string>
<string>quit</string>
</array>
<key>IdPSettings</key>
<dict>
<key>OktaAuthServer</key>
<string>***************</string>
<key>Provider</key>
<string>Okta</string>
</dict>
<key>TemporaryUserPermissions</key>
<dict>
<key>TemporaryUserPromotion</key>
<true/>
<key>UserPromotionDuration</key>
<integer>360</integer>
<key>UserPromotionLimit</key>
<integer>10</integer>
<key>UserPromotionReason</key>
<true/>
<key>UserPromotionChoices</key>
<array>
<string>"General Use"</string>
<string>"I want it"</string>
<string>"Approved"</string>
</array>
<key>UserPromotionRole</key>
<array>
<dict>
<key>Duration</key>
<integer>360</integer>
<key>Name</key>
<string>**************</string>
</dict>
</array>
<key>UserPromotionTimer</key>
<true/>
<key>VerifyUserPromotion</key>
<true/>
</dict>
<key>PasswordPolicies</key>
<dict>
<key>CheckOnNetworkChange</key>
<true/>
<key>ExpirationCountdownStartDay</key>
<integer>**</integer>
<key>ExpirationNotificationStartDay</key>
<integer>**</integer>
<key>NetworkCheck</key>
<integer>**</integer>
<key>PolicyRequirements</key>
<dict/>
<key>SyncPasswordsMessage</key>
<string>Your macOS password is not the same as your OKTA Password, please sync them.</string>
</dict>
<key>SignIn</key>
<dict>
<key>AutoAuthenticate</key>
<true/>
<key>AutoOpenAppAtLogin</key>
<true/>
</dict>
<key>UserHelp</key>
<dict>
<key>HelpOptions</key>
<string>***************</string>
<key>HelpType</key>
<string>URL</string>
</dict>
<key>WebBrowser</key>
<dict>
<key>BrowserSelection</key>
<string>Google Chrome</string>
<key>LaunchBrowser</key>
<true/>
</dict>
</dict>
</plist>

[etpit]

Any luck with this? I am facing the same issue at the moment.