Setup Centrify as a SCIM Client using the User Provisioning module in Drupal
Overview
User Provisioning provides you with the ability to manage all the users at a central user management identity. Centrify Provisioning service supports SCIM 2.0 protocol for automatic provisioning/de-provisioning. miniOrange User Provisioning and Sync module implement the SCIM endpoints to allow provisioning/de-provisioning of users into the Drupal site as and when any CRUD operation is performed in the central identity i.e. Centrify.
Installation Steps
- Using Composer
- Using Drush
- Manual Installation
Note: You will require the Premium version of the module to set up Drupal as an SCIM server.
Configuration Steps
Configure Drupal as SCIM Server:
- Once the module is installed, navigate to the Configuration tab of the Drupal site and select miniOrange User Provisioning.
- Navigate to the User Provisioning tab of the module and click on the Configure button under the Changes from Provider to Drupal (SCIM Server) section.
- Copy the SCIM Base URL and SCIM Bearer Token, which you will keep handy.
Configure Centrify SCIM user provisioning:
- Configure Centrify for SSO:
- In your Centrify account, add a new custom app.
- In the application, setup your SAML SSO Configuration.
- Now navigate to Account Mapping and configure like the following:
- Navigate to Provisioning tab.
- Enable Enable provisioning for this application.
- Enter the SCIM base URL in SCIM Service URL from the SCIM Configuration tab of the SCIM user provisioning module.
- In Authorization Type, enable Authorization Header.
- Enter the SCIM Bearer Token in Bearer Token from the SCIM Configuration tab of the SCIM user provisioning module.
- Once complete, click on Verify.
- In the Role Mappings section be sure to set up the Role as "User".
You have successfully configured the miniOrange drupal SCIM User Provisioning module with Centrify.