Centrify SCIM Provisioning and Sync in DNN

DNN SCIM User Provisioning and Sync provides an option to sync users (create, update, delete and deactivate) in real-time. SCIM is an open standard that allows for the automation of user provisioning. User provisioning and sync is the process of creating, reading, and updating a user's account information and access policies for multiple applications and systems simultaneously. Users are given the adequate amount of access and permissions based on their role and duties within an organization. User provisioning maintains security and compliance standards while ensuring that the employees have just the right level of access to the organization's resources to carry out their set of tasks. Follow the step-by-step guide to configure Centrify User (SCIM) Provisioning in DotNetNuke (DNN).

Download & Installation

• Download the DNN SCIM User Provisioning & Sync module.
• Now go to Settings >> Extensions and click on Install Extension for installing the miniOrange DNN SCIM User Provisioning module.

• Click on miniOrange User Provisioning and Sync to drag-and-drop this module on any section of the page.

You have successfully installated the DNN SCIM module on your DNN website.

1. Configure DNN as SCIM server

• Navigate to the DNN SCIM Settings tab to configure DNN SCIM & User Provisioning module.
• Copy the SCIM Provisioning URL and Bearer Token, and keep it handy, we will require it later.

Under SCIM Operations you can perform the following two operations:

A] Provisioning

• Create User - To create a user provisioned to the DNN website
• Update User - To update a user provisioned to the DNN website

B] Deprovisioning [PREMIUM+]

• Delete User - To delete a user in your DNN website
• Deactivate User - To deactivate a user in your DNN website
• Enable Deprovisioning for Administrators - To enable deprovisioning at the administrator level

Navigate to Attribute Mapping section to map IDP attributes to your DNN website.

• You can map any attributes of the IdP to the attributes in the users table of your database.
• According to SCIM protocol, attributes received from IDP are "userName", "emails", "givenName", "familyName".

Attribute Name	Attribute Value
Username	userName
Email	emails
First Name	givenName
Last Name	familyName
Custom Attribute Mapping	This feature is available in the premium+ version.

• After successfully configuring basic attribute mapping, click on Save Mapping.

2. Configure Centrify as SCIM client

Configure Single Sign-On for Centrify:

• In your Centrify account, add a new custom app.
• In the application, setup your SAML SSO Configuration.
• Now navigate to Account Mapping and configure like the following:

• Navigate to Provisioning tab and enable Enable provisioning for this application
• Enter the SCIM base URL in SCIM Service URL from step 1.
• In Authorization Type, enable Authorization Header.
• Enter the SCIM Bearer Token in Bearer Token from step 1.

• Once complete, click on Verify.
• In the Role Mappings section be sure to set up the role as "User".

You have successfully configured the miniOrange DNN SCIM User Provisioning module with Centrify. You can configure DotNetNuke (DNN) User Provisioning and Sync with Azure AD, Salesforce, OneLogin, PingFederate, Okta, Centrify, JumpCloud as well as with your own custom IDP.

Additional Resources

• DNN SharePoint Integration
• DNN Office365 Integration
• DNN PowerBI Integration