SCIM Configuration Guide

Configure User Provisioning with Okta

Murilo Aguiar avatar
Written by Murilo Aguiar
Updated over a week ago

If your organization uses Okta to manage your employees’ access to tools and services, you can take advantage of Okta’s “Provisioning” feature to automatically grant access to zkipster to your users. Additionally, you can also synchronize your Okta Groups with zkipster Teams.

The integration between Okta and zkipster is built around an industry-standard protocol known as SCIM (System for Cross-domain Identity Management). To learn more about how Okta works with SCIM, please see this article.

Please note that SCIM is available exclusively on the Enterprise plan level.

Check out the instructions below on how to configure both zkipster and Okta to get provisioning up and running for your organization.

Features

The following provisioning features are currently supported by zkipster:

  • Push Users.(*1)(*2) Users in Okta that are assigned to the zkipster application in Okta are automatically added as members to your organization in zkipster.

  • Update user attributes.

  • Deactivate/reactivate users

  • Push Groups. Groups and their members in Okta can be pushed to zkipster (as zkipster teams and team members).

(*1) Pushing users is limited by the maximum number of account users defined in the subscribed plan in zkipster

(*2) the user phone attribute must follow the format <country_prefix> <telephone_number>

Step-by-step configuration instructions

Configure your Provisioning settings for zkipster as follows.

In zkipster

Login to your zkipster account and navigate to Account Settings, Integrations, API Access. You should see your zkipster account API Access configuration page.

Copy the value for API key. You'll need it when you configure Okta.

In Okta

Log in to your Okta admin portal and complete the following steps:

  1. Search and add the zkipster application if you don't have it instaled yet.

  2. From the application, click on the Provisioning tab and then click Configure API integration.

  3. Select Enable API integration and enter the following information:

    API Token: the API key you copied from your zkipster account.

  4. Select Test API Credentials. If the test passes, select Save.

  5. Select the To App under Settings.

  6. Select Edit and select Enable for the options you'd like to have.

  7. Select Save to apply the integration settings.

Assign People or Groups to the zkipster app

  1. Go to the Assignments tab.

  2. From the Assign drop-down menu, select Assign to People or Assign to Groups.

Enable “push groups” functionality

Groups and their members can be pushed to zkipster as teams and team members.

  1. To sync the group information with the zkipster service, go to the Push Groups tab.

  2. Click Push Groups > Find groups by name

  3. Search and select the groups to sync with the zkipster service, making sure to select Push group memberships immediately.

  4. Click Save to only add a single group or Save & Add Another if you wish to push multiple groups.

  5. Click Close.

  6. On the Push Groups page, verify that all of your groups have been added

Did this answer your question?