Setup Centrify as a SCIM Client using the User Provisioning module in Drupal

Overview

User Provisioning provides you with the ability to manage all the users at a central user management identity. Centrify Provisioning service supports SCIM 2.0 protocol for automatic provisioning/de-provisioning. miniOrange User Provisioning and Sync module implement the SCIM endpoints to allow provisioning/de-provisioning of users into the Drupal site as and when any CRUD operation is performed in the central identity i.e. Centrify.

Playground

Schedule a Meeting

Installation Steps

Using Composer
Using Drush
Manual Installation

Download the module:

composer require 'drupal/user_provisioning'

Navigate to Extend menu on your Drupal admin console and search for miniOrange User Provisioning using the search box.
Enable the module by checking the checkbox and click on Install button.

Configure the module at

{BaseURL}/admin/config/people/user_provisioning/overview

Install the module:
```
drush en user_provisioning
```
Clear the cache:
```
 drush cr
```

Configure the module at

{BaseURL}/admin/config/people/user_provisioning/overview

Navigate to Extend menu on your Drupal admin console and click on Install new module button.
Install the Drupal User Provisioning and Sync module either by downloading the zip or from the URL of the package (tar/zip).
Click on Enable newly added modules.
Enable this module by checking the checkbox and click on Install button.

Configure the module at

{BaseURL}/admin/config/people/user_provisioning/overview

Note: You will require the Premium Version of the module to set up Drupal as an SCIM server.

Configuration Steps

Configure Drupal as SCIM Server:

Once the module is installed, navigate to the Configuration tab of the Drupal site and select miniOrange User Provisioning.

miniOrang User Provisioning and Sync module installation steps

Navigate to the User Provisioning tab of the module and click on the Configure button under the Changes from Provider to Drupal (SCIM Server) section.

Copy the SCIM Base URL and SCIM Bearer Token, which you will keep handy.

Drupal User Provisioning and Sync - Copy the SCIM Base URL and SCIM Bearer Token

Configure Centrify SCIM user provisioning:

Configure Centrify for SSO:

In your Centrify account, add a new custom app.
In the application, setup your SAML SSO Configuration.
Now navigate to Account Mapping and configure like the following:

Centrify SCIM - Automated User Provisioning in drupal - Account Mapping

Navigate to Provisioning tab.
Enable Enable provisioning for this application.
Enter the SCIM base URL in SCIM Service URL from the SCIM Configuration tab of the SCIM user provisioning module.
In Authorization Type, enable Authorization Header.
Enter the SCIM Bearer Token in Bearer Token from the SCIM Configuration tab of the SCIM user provisioning module.