JumpCloud Automated User Provisioning into WordPress using SCIM | JumpCloud SCIM for WordPress

Overview

Configure real-time JumpCloud user provisioning for WordPress using SCIM. Our SCIM User Provisioning plugin for WordPress allows you to automate user creation, update and delete user information from the IDP (Identity Provider) in real-time to your WordPress site. This guide will enable you to configure SCIM user provisioning for your WordPress site using JumpCloud as the Identity Provider, to achieve seamless automated real-time JumpCloud SCIM user provisioning for WordPress. In addition to real-time provisioning, the plugin also provides advanced features like attribute mapping, de-provisioning, SCIM audit logs, default role assignment, content reassignment, and multisite subsite selection. For a detailed overview of the features, check out the SCIM User Provisioning plugin for WordPress. You can follow the below steps to setup JumpCloud SCIM user provisioning for WordPress.

Features

The following provisioning features are supported:

• Push New Users: New users created through JumpCloud will also be created in the WordPress site.
• Push Profile Updates (Premium Feature): Updates made to the user's profile through JumpCloud will be pushed to the WordPress site.
• Push User Deactivation (Premium Feature): Deactivating the user or disabling the user's access to the application through JumpCloud will deactivate/delete the user in the WordPress site.

  Note: For this application, deactivating/delete a user will depend on the configuration of miniOrange SCIM user provisioning add-on.

• Reactivate Users (Premium Feature): User accounts can be reactivated in the application.

  Note: For reactivating the user, it is required to select the Deactivation mode in the SCIM user provisioning add-on.

• Import Users (Premium Feature): Users can import active users from WordPress to JumpCloud.

Future Enhancements in the Plugin:

• Import Groups
• Sync password
• Enhanced group push

Pre-requisites : Download And Installation

• Log into your WordPress instance as an admin.
• Go to the WordPress Dashboard -> Plugins and click on Add New.
• Search for a SCIM User Provisioning plugin for WordPress and click on Install Now.
• Once installed click on Activate.
• You will need to configure the SSO as well to enable the provisioning. You can download our miniOrange SAML SSO plugin to enable the SSO on your WordPress site.
• To get the premium plugin, please contact us at samlsupport@xecurify.com.

Follow the steps below for configuring JumpCloud SCIM user provisioning in WordPress

Step 1: Configure SCIM user provisioning plugin for WordPress

• Install the premium plugin and login using your miniOrange credentials.
• You would require a license key to activate the plugin.

  Note: In case you already have the paid version of the miniOrange SAML 2.0 SSO plugin you won’t require a login or license key.

• Select the Identity Provider as JumpCloud.
• You can find the SCIM Base URL and Bearer token in the SCIM configuration tab of the plugin.

Step 2: Configure JumpCloud for SCIM provisioning

• Go to JumpCloud portal and login with the administrator account.
• You will be presented with the home screen of JumpCloud.

• In the left tab, under the User Authentication section, select the SSO.
• Click on + to add the application.

• In the search bar, search for the WordPress application and click on Configure button.

• In the General Info tab, enter your application name in the Display Label block.

• Navigate to the SSO tab, you can either upload the Service Provider Metadata or can enter manually SP Entity ID and ACS URL from the miniOrange SAML SP plugin.

• Now, go to the home page and select your configured application. Then click on the Export Metadata button.

• Navigate to the miniOrange SAML SP plugin. In the Service Provider Setup tab, enter the Identity Provider Name and Upload the Metadata file downloaded from the JumpCloud.

• In the JumpCloud portal, inside your configured WordPress application, navigate to the Identity Management tab.
• Scroll down to the bottom, enter the SCIM Base URL in the Base URL field and the SCIM Bearer token in the Token Key field from the SCIM Configuration tab of the SCIM User Provisioning plugin.
• Click on the Test Connection button, if the configuration is successful then the success message will be displayed and then click on Activate button.

• You can now assign the users to the app by going to the User Groups tab in the left pane.
• Under the Users tab, assign the users to the application you created. Move to the Application tab and select the configured application and click on Save.

With this guide, we have successfully configured SCIM user provisioning between WordPress and JumpCloud as the Identity Provider (IDP) using the SCIM plugin for WordPress. This solution ensures that you are ready to roll out seamless and real-time JumpCloud SCIM user provisioning for WordPress within minutes.

Step 3: De-provisioning of Users [Available in premium plan]

• You can select the deprovisioning mode in the SCIM configuration tab of the SCIM User Provisioning plugin.
• By default, De-provisioning will delete the users from the WordPress site.

Step 4: Attribute Mapping for SCIM Users [Available in premium plan]

• Attribute Mapping feature allows you to map the user attributes sent by your IDP to the user attributes in the WordPress site. These attributes can be seen on right hand corner.
• Custom Attribute Mapping: This feature allows you to map any attribute sent by the IDP to the usermeta table of WordPress.
• Click on Add Attribute button to add custom attribute field.
• Under the Custom Attribute Name field, enter the attribute name you want to map.
• Under the Attribute Name from the IDP field, select the IDP attribute from the dropdown that you want to map.
• Enable the toggle for an attribute if you want to display it in the WordPress Users table. Then Click on Save.

Step 5: SCIM Audit [Available in premium plan]

• SCIM Audit allows you to keep the track of all the provisioning activity taking place. It shows you the detailed information about each user being provisioned. This information includes the User Action, Status, Created Date etc.
• In the miniOrange SCIM User Provisioner plugin, navigate to the SCIM Audit tab.
• Here you can see all the User provision information.

• Click on the Show Advanced Search button, to search the provisioned user details by using the search filters like WordPress Username, IP Address etc.

• On clicking the Clear Reports button, you can clear all the user provisioned details.

Step 6: Additional Feature Configurations [Available in premium plan]

Set Default Role for New Users

When new users are created via SCIM provisioning, you can automatically assign roles:

• Go to Advanced Settings >> Default Role Provisioning
• Choose the role you want the new users to have (e.g. Manager)
• Turn on Update Existing User Role if you want already existing users’ roles to be updated during provisioning.

User Activation Status

You can easily check whether users are active or inactive.

• When enabled, a new column appears in the Users List in the WordPress dashboard.
• It shows whether each user is:
  • Activated (active in your IdP)
  • Deactivated (inactive in your IdP)
• This status updates automatically whenever users are added or removed via SCIM provisioning and deprovisioning.

Content Reassignment on User Deprovisioning

When a user is deleted via SCIM provisioning, you can decide what happens to their content.

• Choose a Default Content Owner to automatically take ownership of the content.
• Or select Do Not Reassign to permanently delete all the content.

Select Subsites for SCIM User Provisioning

• Select the subsites where users should be assigned after SCIM provisioning.
• Users will only get access to the selected subsites in the network.
• This helps to control access, restrict user assignment to specific subsites only, and keep user permissions organized.

If you are looking for anything which you cannot find, please drop us an email on samlsupport@xecurify.com

Related Articles

• What is SCIM User Provisioning?
• User Data Synchronization
• Azure AD SCIM User Provisioning for WordPress
• Okta SCIM User Provisioning for WordPress
• Frequently Asked Questions (FAQs)

Why Our Customers choose SCIM User Provisioning Integration ?