Install the Okta On-prem SCIM Server

After you've installed and configured the Okta Provisioning Agent, the next step is to install the Okta On-prem SCIM Server on your Linux host. The SCIM server works with the provisioning agent to handle user and entitlement operations between Okta and your on-premises database.

  1. In the Admin Console, go to SettingsDownloads.

  2. Locate the On-prem SCIM Server section and click Download Latest.
  3. Copy the downloaded .rpm file to a scratch directory (temporary folder) on your Linux server, and then cd to that directory.
  4. Install the SCIM Server by running the following command:

    You can copy the installation command directly from the Setup your provisioning dialog when configuring the connector. The command in the interface is pre-populated with your unique customer ID and the correct file name, so you can copy and run it without making any changes.

    sudo CUSTOMER_ID=mycompany rpm -ivh OktaOnPremScimServer.rpm

  5. When you're prompted to continue, enter yes.
  6. Verify that the service is running:sudo systemctl status OktaOnPremScimServer.service
  7. Generate the API token and TLS certificate that are required for Okta to communicate with the SCIM server:sudo /opt/OktaOnPremScimServer/bin/Get-OktaOnPremScimServer-Credentials.sh
  8. The script outputs an API bearer token and the file path to the server's certificate.

    1. Copy the API token and save it to a secure location.

    2. Download the certificate file to your local machine. You need both of these artifacts to complete the configuration.

  9. Move the JDBC driver file (which you downloaded in the prerequisites) to the SCIM server's library directory:sudo cp /path/to/ojdbc.jar /opt/OktaOnPremScimServer/userlib/
  10. Restart the Okta On-prem SCIM Server to apply the changes:sudo systemctl restart OktaOnPremScimServer.service