Skip to main content
Top

SCIM: User provisioning with Okta

System for Cross-domain Identity Management, SCIM for short, is an open standard that makes it possible to automate user provisioning. With SCIM, it's easy to add, update or remove users across different applications simultaneously. The solution is built using the SCIM 2.0 specification.

In order to set up user provisioning with Okta, it has to be configured both in Scoro and Okta.

Note! Read more about OKTA and SCIM.

1. Set up SCIM in Scoro

SCIM.png

  1. SCIM settings can be found under Settings → Integrations → SCIM
  2. Admin users can set the default values for new users created via SCIM:
    - Default entity (only available in case of multiple entities)
    - Default user type
    - Email notification with account data
  3. In order to enable the SCIM API, you must generate an OAuth bearer token
  4. After SCIM is enabled, the API credentials allow you to set up SCIM from Okta side

2. Set up Okta App integration

  1. In order to use Okta User Provisioning, you first need to configure Single Sign-On in the app.
  2. Check the manual for connecting Scoro and SSO.
  3. Check the manual for Okta SCIM.
  4. Once the SSO integration has been created, SCIM provisioning can be configured.

3. Add OKTA SCIM Provisioning

  1. After your integration is created, open the General tab.
  2. Choose Edit.
  3. Under Provisioning choose Enable SCIM provisioning.
    Enable-provisioning.png
  4. Save the settings.

4. Configure provisioning options

  1. In the integration Settings page, choose Provisioning.
    - The SCIM connection settings are under Settings > Integration.
  2. Click Edit.
  3. Specify the SCIM connector base URL, which can be found under Scoro SCIM settings.
  4. Add userName as the unique identifier field for your users on your SCIM server.
  5. Choose the following provisioning actions under Supported provisioning actions:
    1. Import New Users and Profile Updates. This option populates the Settings > To Okta page. You can specify how Okta imports new users and user profile updates. For more details on importing people, see Import users.
    2. Push New Users. This option populates the Settings > To App page. It also contains the settings for all user information that flows from Okta into your SCIM app.
    3. Push Profile Updates. This option populates the Settings > To App page. It also contains the settings for all profile information that flows from Okta into your SCIM app. See about profile push.
    4. Groups are not supported by Scoro SCIM.
  6. Choose HTTP Header as Authentication Mode.
  7. Add Bearer token as Authorization. You can find the token under Scoro SCIM settings.
    Bearer-token.png
  8. Select Test Connector Configuration to ensure that the credentials are correct.
  9. Save the settings.

5. Map user attributes

After you have successfully saved the credentials, you will need to configure the To App and To Okta sections

  1. Open To App to choose which user-related actions can be performed.
    - All options apart from Sync password are supported and can be enabled.
  2. Users can configure attribute mappings under My new applications - Attribute Mappings.
    1. Keep only the fields that can be synced with Scoro SCIM:
      - userName
      - givenName
      - familyName
      - email
      - emailType
      - title
      - active
      - primaryPhone
      - primaryPhoneType
      - userType
    2. Other listed attributes can be unmapped from the Profile Editor and then deleted from the mapping view because these values can’t be synced with Scoro SCIM .
    3. The complete list of mapped values
      Mapped-values.png
    4. Open To Okta to import existing users from Scoro, if necessary.
      - For details on importing people, see Import users.
    5. Activate the application.
    6. You have completed the configuration and can start assigning people to Scoro under Assignments.
    7. User provisioning between Scoro and Okta is now configured.
 
Powered by Zendesk