Setup Okta as a SCIM Client and Drupal as a SCIM Server

Overview

With the User Provisioning and Sync Module, you should be able to automatically create (provision) and delete (deprovision) user accounts and have them synced bidirectionally between Drupal and any Identity Provider - in this case, Okta. Any changes or updates done to the user information can also be synced between the SCIM Client and Server. Follow along to learn how.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  composer require 'drupal/user_provisioning'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange User Provisioning using the search box.
• Enable the module by checking the checkbox and click on the Install button.
• You can configure the module at:

  {BaseURL}/admin/config/people/user_provisioning/overview

• Install the module:

  drush en drupal/user_provisioning

• Clear the cache:

   drush cr

• You can configure the module at:

  {BaseURL}/admin/config/people/user_provisioning/overview

• Navigate to Extend menu on your Drupal admin console and click on Install new module.
• Install the Drupal User Provisioning and Sync module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on install button.
• You can configure the module at:

  {BaseURL}/admin/config/people/user_provisioning/overview

Create Application in Okta

• Log into the Okta portal.
• From the left panel, select Applications under the Applications dropdown.

• Click on the Browse App Catalog button.

• Search for the SCIM Bearer Token and select SCIM 2.0 Test App (OAuth Bearer Token).

• Click on the Add Integration button.

• In General Settings, enter the application name in the Application Label text field and click the Next button.

• Under the Sign-On Options, scroll down and click on the Done button.

Setup Okta as SCIM Client:

• Navigate to the Provisioning tab and click on the Configure API Integration button.

• Check the Enable API Integration checkbox.

• Paste the copied SCIM Base URL and Bearer Token into the SCIM 2.0 Base Url and OAuth Bearer Token fields, respectively.
• Click on the Test API Credentials button.

• Once the Test is successful, click on the Save button.

Select the allowed operations:

• Navigate to the To App section from the left panel of the Provisioning tab.

• Click on the Edit button next to the Provisioning to App.

• Enable the operations (Create/Update/Deactivate/Sync Password) that will be allowed for provisioning.

• Click on the Save button.

How to Assign a User:

• Navigate to the Assignments tab and click on Assign. From the dropdown, select Assign to People.

• Search for the user(s) to be assigned and click on the Assign button.

• Fill in or Confirm the user details and click on Save and Go Back button.

• Once the user(s) is assigned, click on the Done button.

• The user has been successfully assigned to the Okta Application.

• Let us verify whether the user has been successfully provisioned to the Drupal site:
• Navigate to the Drupal site and click on the People tab in the top navigation panel (/admin/people).
• The user has been successfully created on the Drupal site.

Group Provisioning:

• Under the Assignments tab, click on Assign, then select Assign to Groups.

• Select the group and click on the Assign button.

• Next, click on the Save and Go Back button.
• After successfully assigning the group, click on the Done button.

• It will only provision users and will not create any group or role on the Drupal site. To create a role on the Drupal site, follow the next step.

Create Role on Drupal:

• To create a role on the Drupal site, click on the Push Groups button.

• From the Push Groups dropdown, select Find groups by name.

• Search for the group name and select the group.

• Scroll down and click on the Save button.

• The group has been successfully pushed to the Drupal site.

• Let us verify whether the user role has been successfully provisioned to the Drupal site:
• Navigate to the Drupal site and click on the People tab in the top navigation panel (/admin/people).
• The user role has been successfully created on the Drupal site.

• The created role has been successfully assigned to the user.

Congratulations, you have successfully set up Drupal as the SCIM server and Okta as the SCIM client.

If the provisioning was not successful, please contact us at drupalsupport@xecurify.com. Kindly include a screenshot of the error window, and we will assist you in resolving the issue and guide you through the setup.