Configure SCIM Provisioning for Okta
Users with Administrator access in their Okta organization can configure Okta for SCIM provisioning in .
Once you have your Base URL and API Key, configure your SCIM provisioning in Okta:
- In Okta, go to Application > Create SAML Application.
- Enter your SAML Configuration values. For the time being, use test values for Entity ID and Sign-on URL. Then create the application.
- On the General Settings page, click to Edit > Provisioning. Select SCIM, and then click Save.
- On the Integration page of the Provisioning tab, provide the following
information:
- SCIM connector base URL: Provide the Base URL from .
- Unique identifier field for users: userName.
- Supported provisioning actions: Check all available options.
- Authentication mode: HTTP Header.
- Authorization: Paste the API Key generated from .
- Click Test Connector Configuration to test the provided keys. A GET request will be sent to the SCIM server with a filter parameter.
For more information on configuring SCIM endpoints for Okta, refer to Okta's documentation.
Attribute Mappings in Okta
Attribute mappings define how user information from the customer's identity provider is mapped to SCIM attributes expected by . Each mapping specifies which user data from the customer's system should be assigned to a SCIM attribute type during provisioning.
The table below describes the SCIM attributes that need to be mapped to their corresponding Okta attributes:
| SCIM Attribute | Source Value in Okta |
|---|---|
| userName | user.email |
| givenName | user.firstName |
| familyName | user.lastName |
| displayname | user.displayname |
| country | user.countryCode |
| organization | user.organization |
| userName | user.email |