Okta Integration Wizard: Provisioning settings

Fields for configuring user and group provisioning with SCIM 2.0 or API Integration Actions. The available fields vary based on the capabilities you selected.

SCIM 2.0 properties

  • You can only submit SCIM 2.0 integrations with the OIW.
  • Integrations with Basic authentication to the SCIM server aren't supported in the OIW.
  • You must have a SCIM service for your custom app. If you don't, see Build a SCIM provisioning integration to understand SCIM requirements.
Table 1. SCIM 2.0 fields
Field Description
Base URL

Specify the base URL for your SCIM server. The base URL must support the HTTPS protocol. If you're using a per tenant design, include the variable names that you created in your URL. For example: 'https://' + app.subdomain + '.example.com/scim2/'. See Dynamic properties with Okta Expression Language.

The maximum field length is 1024 characters.

This is a required field.
What objects do you want Okta to manage in your integration?

Select the objects that you want Okta to manage with your SCIM integration.

  • Users: Okta manages users in your app by default.
  • Groups: Select this option if you also want Okta to manage groups in your app.

This is a required field.
User operations

Select user operations for your SCIM integration.

  • Create: Okta can create users in your app.
  • Read: Okta can read users from your app. This is a required field and is selected by default.
  • Update: Okta can update users in your app.
  • Change password: Okta can update user passwords in your app.
  • Deactivate: Okta can deactivate users in your app.
  • Support PATCH for User: Okta can update users with the PATCH method in your app. This is a required field and is selected by default.
  • Import User Schema: Okta can automatically retrieve supported attributes from your SCIM server.

Note: Import users capability is enabled by default. Profile sourcing isn't supported; contact the OIN team if your integration must support this capability.
Group operations

Group operations for your SCIM integration. These are all selected by default if your integration manages the Groups object.

  • Create: Okta can create groups in your app.
  • Read: This is a required field. Okta can read groups from your app.
  • Update (Uses PATCH): Okta can update groups in your app with the PATCH method.
  • Delete: Okta can delete groups in your app.

Note: Import groups capability is enabled by default.

Provisioning API Integration Actions

Table 2. Provisioning API Integration Actions fields
Field Description
User query
List users Specify the flow to list users. This is a required field.
Get user by ID Specify the flow to retrieve a user by their ID. This is a required field.
Get user by username Specify the flow to retrieve a user by their username. This is a required field.
User schema discovery settings
List user schema Specify the flow to list your user schema. This is a required field.
List user schema property values Specify the flow to list your user schema and the available attribute values. This is a required field.
User operations
Create user Optional. Specify the flow for Okta to create a user in your app.
Update user Optional. Specify the flow for Okta to update a user in your app.
Update user password Optional. Specify the flow for Okta to update a user password in your app.
Activate user Optional. Specify the flow for Okta to activate a user in your app.
Deactivate user Optional. Specify the flow for Okta to deactivate a user in your app.
Group query settings
List groups Specify the flow to list the groups in your app. This is a required field.
Get group by ID Specify the flow to retrieve a group by their ID. This is a required field.
Group operations
Enable group operations Enable group operations. Specify flows for all group operations if you enable this feature.
List groups by display name Specify the flow to list groups in your app based on the group display name.
Create group Specify the flow to create a group in your app.
Update group Specify the flow to update a group in your app.
Remove group Specify the flow to remove a group in your app.
Group Membership
Enable group membership Enable group membership operations. Specify flows for all group membership operations if you enable this feature.
List group members Specify the flow to list group members in your app.
Add group members Specify the flow to add members to a group in your app.
Remove group members Specify the flow to remove members from a group in your app.