SCIM setup with okta

This will show you how to setup up SCIM with okta and the CLM module.

Installing app

Go to Applications and add a new app from the catalog.

Search for scim and add “SCIM 2.0 Test App (Header Auth)”

Set username field to email.

Set up provisioning

Go to the provisioning tab and click the configuration button.

You will need the API endpoint and a token. The SCIM API endpoint is usually: https://api.hyperlex.fr/api/scim/v2

Click the “Test credentials” button, it should confirm the validity of the endpoint and token.

You can then save and enable provisioning.

Role attribute

In order to set the users roles, you have to create an attribute. Go to the application settings page.

Go to profile editor to find the list of attributes for this app.

Add a new attribute:

Display name: CLM role
type: string
variable name: roleId
external name: role Id
External namespace: urn:ietf:params:scim:schemas:core:2.0:User
Enum: yes
Enum values
- Read only: <read only UUID from CLM>
- Contributor <contributor UUID from CLM>

Adding users and groups to SCIM app

You can now add users to the application. Once a user has been added to the app (directly or through a group) you can edit the profile to add values specific to the CLM app (like role).

You can them select a role for this user.