Setup Google Apps as a SCIM Client using the User Provisioning module in Drupal

Overview

User Provisioning provides you with the ability to manage all the users at a central user management identity. Google Apps Provisioning service supports SCIM 2.0 protocol for automatic provisioning/de-provisioning. miniOrange User Provisioning and Sync module implement the SCIM endpoints to allow provisioning/de-provisioning of users into the Drupal site as and when any CRUD operation is performed in the central identity i.e. Google Apps.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  composer require 'drupal/user_provisioning'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange User Provisioning using the search box.
• Enable the module by checking the checkbox and click on Install button.
• Configure the module at

  {BaseURL}/admin/config/people/user_provisioning/overview

• Install the module:

  drush en user_provisioning

• Clear the cache:

   drush cr

• Configure the module at

  {BaseURL}/admin/config/people/user_provisioning/overview

• Navigate to Extend menu on your Drupal admin console and click on Install new module button.
• Install the Drupal User Provisioning and Sync module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on Install button.
• Configure the module at

  {BaseURL}/admin/config/people/user_provisioning/overview

Configuration Steps

Configure Drupal as SCIM Server:

• Head towards the Drupal site and navigate to the User Provisioning tab of the module (/admin/config/people/user_provisioning/provisioning).
• In the Changes from Provider to Drupal (SCIM Server) section, click on the Configure button, as indicated in the screenshot below.

• From Configure Drupal as a SCIM server copy the SCIM Base URL and SCIM Bearer Token and keep it handy.

Create Application in Google Apps:

• Log into the Google Admin.
• From the left menu bar, click on the Apps dropdown and select the Web and mobile apps option.

• Search for Keeper and select Keeper Web (SAML).

Configure Google apps as SCIM Client:

• Once done with the SAML SSO configuration, click on the Configure autoprovisioning link.

• Paste the copied SCIM Bearer Token under the Access token text field, and click on the Continue button.

• Paste the copied SCIM Base URL under the Endpoint URL, and click on the Continue button.

• Attribute Mapping is an optional step. Click on the Continue button.

• The Provisioning Scope is an optional step. It allows to limit the Provisioning of a particular group only. Enter the Group to provision under the Groups text field.

• You can configure the De-provisioning of the user. To know more about De-provisioning click here.
• Click on the Finish button.

• Click on the Autoprovisioning section.

• Toggle the Provisioning status to Turn on.

• The users are automatically provisioned to the Drupal site from Google Apps.
• Let’s check if the user is provisioned to the Drupal site. Navigate to the Drupal site and click on the People tab from the top navigation panel. As per the following screenshot, the user has been successfully created on the Drupal site.

Congratulations, you have successfully set up Drupal as the SCIM server and Google Apps as the SCIM client.

If the Provision was not successful, please contact us at drupalsupport@xecurify.com. Please send the screenshot of the error window, and we will assist you in resolving the issue and guiding you through the setup.