OneLogin Automated User Provisioning into WordPress using SCIM | OneLogin SCIM for WordPress

Overview

SCIM plugin for WordPress gives you ability to automate user creation, updation and deletion process from existing Identity Provider to your WordPress site. The System for Cross-domain Identity Management (SCIM) is an open standard for securely synchronizing user information between multiple applications. Here we will go through a step-by-step guide to enable SCIM user sync between WordPress site and OneLogin by considering OneLogin as Identity Provider. In addition to real-time provisioning, the plugin also provides advanced features like default role assignment, user activation status, content reassignment, and multisite subsite selection. For a detailed overview of the features, check out the SCIM User Provisioning plugin for WordPress. You can follow the below steps to setup OneLogin SCIM user provisioning for WordPress.

Pre-requisites : Download And Installation

• Log into your WordPress instance as an admin.
• Go to the WordPress Dashboard -> Plugins and click on Add New.
• Search for a SCIM User Provisioning plugin for WordPress and click on Install Now.
• Once installed click on Activate.
• To get the premium plugin, please contact us at samlsupport@xecurify.com.

Follow the steps below for configuring OneLogin SCIM user provisioning in WordPress

Step 1: Configure OneLogin user provisioning in WordPress

• Go to SCIM Configuration Tab to find information required to configure in Onelogin's SCIM Provisioner.

• Log in to your Onelogin Portal. Add SCIM Provisioner with SAML.

• Start configuring it by adding Display Name.

• Go to Configuration Tab. Enter SCIM Base URL, SCIM Bearer Token (which you will find in Step 1 above).
• Enable provisioning from SCIM Provisioner with SAML application.

• Once done with configuration, add new user.

• Approve the provisioning request. On success, status will change to 'provisioned'.

Step 2: Additional Feature Configurations [Available in premium plan]

Set Default Role for New Users

When new users are created via SCIM provisioning, you can automatically assign roles:

• Go to Advanced Settings >> Default Role Provisioning
• Choose the role you want the new users to have (e.g. Manager)
• Turn on Update Existing User Role if you want already existing users’ roles to be updated during provisioning.

User Activation Status

You can easily check whether users are active or inactive.

• When enabled, a new column appears in the Users List in the WordPress dashboard.
• It shows whether each user is:
  • Activated (active in your IdP)
  • Deactivated (inactive in your IdP)
• This status updates automatically whenever users are added or removed via SCIM provisioning and deprovisioning.

Content Reassignment on User Deprovisioning

When a user is deleted via SCIM provisioning, you can decide what happens to their content.

• Choose a Default Content Owner to automatically take ownership of the content.
• Or select Do Not Reassign to permanently delete all the content.

Select Subsites for SCIM User Provisioning

• Select the subsites where users should be assigned after SCIM provisioning.
• Users will only get access to the selected subsites in the network.
• This helps to control access, restrict user assignment to specific subsites only, and keep user permissions organized.

You have successfully configured the miniOrange SCIM User Provisioning plugin for WordPress with OneLogin.

SCIM User Provisioning Add-On also supports provisioning for other IDP's like Okta, Cognito, Salesforce, Ping Identity, WSO2, GSuite, GitHub and many more.

Related Articles

• What is SCIM User Provisioning?
• User Data Synchronization
• Azure AD SCIM User Provisioning for WordPress
• Okta SCIM User Provisioning for WordPress
• Frequently Asked Questions (FAQs)

If you are looking for anything which you cannot find, please drop us an email on samlsupport@xecurify.com

Why Our Customers choose SCIM User Provisioning Integration ?