SCIM Configuration for Okta¶

This section explains how to configure SCIM provisioning using Okta.

1. Log into Okta as an administrator.

2. Go to Applications > Create App Integration.

3. Select SAML as Sign-in method. OpenID Connect (OIDC) integration is not currently supported for SCIM provisioning by Okta.

4. Configure the new application ignoring the SSO configuration or filling mocked one. This is a provisioning-only app which does not need to be configured for SSO login.

5. Save the application

6. Go to General tab and Edit the App Settings to Enable SCIM provisioning. Then the Provisioning tab will appear.

7. Go to Provisioning tab and Edit it.

   • In SCIM connector base URL, enter the the SCIM API Base URL copied from SCIM settings in Agora.

   • Configure the email as Unique identifier field for users.

   • Select the HTTP Header as Authentication mode and paste the SCIM token with the one copied from SCIM settings in Agora.

   

8. Test connector configuration, if the connection was successful Save it

9. Reload the Provisioning tab to display additional settings

10. Click Provisioning to App to configure the behavior when pushing Okta changes to Agora. Enable Create users, Update user attributes, and Deactivate users.

Users and groups assigned to the SCIM application will be provisioned to the Agora organization. Note that Okta groups will be provisioned as roles in Agora, and these will be automatically assigned to the provisioned users.

1. Go to Applications

2. Click Push Groups

3. Click Push Groups dropdown button to select Groups to be imported as roles into Agora

Once the roles have been imported successfully, we can assign users to the Application.

1. Go to Applications

2. Click Assignments

3. Click Assign, then

   • Assign to People to assign users individually

   • Assign to Groups to assign the users under the selected Group