Setup CyberArk as a SCIM Client and Drupal as a SCIM Server

Overview

User Provisioning allows for the centralized oversight of all users within an identity management framework. The CyberArk Provisioning service utilizes the SCIM 2.0 protocol to automate the processes of user provisioning and de-provisioning. Meanwhile, the miniOrange User Provisioning and Sync module integrates SCIM endpoints to ensure that any Create, Read, Update, or Delete (CRUD) actions in the central identity system, specifically CyberArk, trigger the appropriate user provisioning and de-provisioning on the Drupal site.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  composer require 'drupal/user_provisioning'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange User Provisioning using the search box.
• Enable the module by checking the checkbox and click on Install button.
• Configure the module at

  {BaseURL}/admin/config/people/user_provisioning/overview

• Install the module:

  drush en user_provisioning

• Clear the cache:

   drush cr

• Configure the module at

  {BaseURL}/admin/config/people/user_provisioning/overview

• Navigate to Extend menu on your Drupal admin console and click on Install new module button.
• Install the Drupal User Provisioning and Sync module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on Install button.
• Configure the module at

  {BaseURL}/admin/config/people/user_provisioning/overview

Setup CyberArk as SCIM Client:

• Login into your CyberArk Admin Console.

• Go to the Provisioning tab, click Enable Provisioning for this application, and then save the changes.

• To confirm the SCIM Provisioning popup window, click the Yes button.

• Select Live Mode.

• Paste the SCIM Base URL, copied from the Drupal SCIM User Provisioning module, into the SCIM Service URL text field.

• Select the Authorization Type as Authorization Header.

• In the Authorization Header, Select Header Type as Bearer Token.

• Paste the SCIM Bearer Token, copied from the Drupal SCIM User Provisioning module, into the Bearer Token text field.
• Click the Verify and Save buttons to save your SCIM Provisioning information.

Congratulations! You have successfully set up Drupal as the SCIM server and CyberArk as the SCIM client.

If the provisioning was not successful, please contact us at drupalsupport@xecurify.com. Kindly include a screenshot of the error window, and we will assist you in resolving the issue and guide you through the setup.