Skip to main content

Configure Okta for SCIM

Overview

This article lists the steps to integrate Okta with Druva inSync for managing Administrators using SCIM 2.0.

Supported provisioning actions

The following SCIM provisioning actions are supported:

  • Creation of individual Administrator accounts

  • Update to existing account status and information.

  • The following information updates are supported currently:

    • Display Name (combination of First Name + Last Name) update

    • Email address update

    • Admin account status update.

    • Timezone

Prerequisites

  • A SCIM Base URL and Bearer Token generated from the Cloud Platform console.

  • Ensure you have selected the SCIM as the provisioning mode in the Druva console. To know more, see select SCIM for Admins provisioning

Procedure

Step 1: Add Application

  1. Log in to your Okta Admin Console and go to Applications > Applications and click Browse App Catalog. Search for SCIM 2.0 Test App (OAuth Bearer Token) and click Add Integration.
    ​

  2. Complete the initial setup wizard for General Settings. Enter the Application Label name as per your preferences and select Next. You will redirect to the Sign-on Options tab.
    ​

  3. Scroll down to select Secure Web Authentication.

  4. Under the Credentials Details section, select the Application username format as Email.

  5. Click Done. The app is created.
    ​

Step 2: Configure App Integration

  1. Open the SCIM app and navigate to the Provisioning tab.

  2. Click Configure API Integration.

  3. Check the box for Enable API Integration.

  4. Enter below URL and paste the API Token (Bearer Token) generated from Cloud Platform.
    ​URL: https://<your-domain>/platform/scim/v2

  5. Click Test API Credentials. If successful, click Save.

Step 3: Enable Provisioning Settings

  1. Under the Provisioning tab, select To App on the left panel.

  2. Under the Provisioning to App section, Click Edit and enable the following features:

    • Create Users: Allows Okta to create new admins in Druva.

    • Update User Attributes: Keeps admin details synced.

    • Deactivate Users: Automatically revokes admin access when removed from the Okta group or suspended.

  3. Click Save.

Step 4: Update Attribute Mapping

  1. Under the Provisioning tab, go to the Attribute Mapping section and select Profile Editor.

  2. Navigate to Attributes and click Edit Mappings. You will be redirected to Profile Mappings.

  3. Under the Okay User to App section, ensure that following attributes are enabled.
    1. Name
    2. Email
    3. Timezone
    4. State

For complete list, see Attributes for Filtering Administrator.

Step 5: Assign Users to the Druva App

To manage specific users or groups within Druva using SCIM, you must assign them to the Druva application in Okta:

  1. Go to the Assignments tab and click Assign. You will see a drop down

  2. Click Assign and select:

    • Assign to People: If you want to assign the Druva app individually to specific users.

  3. Follow the on-screen prompts to select the desired users or groups and complete the assignment.

Once assigned, the select Administrators will be automatically provisioned in Druva based on your configured SCIM mappings.

Related Articles
Did this answer your question?