Setup OneLogin as a SCIM Client and Joomla as a SCIM Server

Overview

Joomla SCIM plugin gives you ability to automate user creation, updation and deletion process from existing Identity Provider to your Joomla site. The System for Cross-domain Identity Management (SCIM) is an open standard for securely synchronizing user information between multiple applications. Here we will go through a step-by-step guide to enable SCIM user sync between Joomla site and OneLogin as Identity Provider.
kindly visit our page here.

Step 1: Install Joomla SCIM User Provisioning Plugin

• Download the zip file for the miniOrange SCIM User provisioning plugin for Joomla from the here.
• Now go to the System -> under Install section -> click on Extensions

• Now under Upload Package File click on browse for file then select zip file of SCIM User Provisioning plugin.

Step 2: Configure Joomla as SCIM Server

• Download Joomla SCIM Plugin, then go to SCIM Configurations tab to get SCIM base URL and SCIM bearer Token .
  

Step 3: Configure SCIM into OneLogin for Provisioning

• Log in to your Onelogin Portal. Go to Applications -> Applications.

• Click on Add App.

• Search SCIM in search field and select SCIM provisioner with SAML (Core Schema v1.1).

• Enter SCIM App Name and click on Save.

• After clicking on save, click on Configuration. In API connection Enter SCIM Base URL SCIM Bearer Token from step 1 .

• Click on Provisioning -> click on Enable Provisioning then click on Save.

• Click on Users enter user details and click on Save.

• Congratulations, you have successfully configured the miniOrange Joomla SCIM User Provisioning plugin with OneLogin.

Step 4: Premium features

The following features are part of the premium version of the miniOrange Joomla SCIM plugin. A premium license is required to access and configure these settings.

• The SCIM Mapping tab in the miniOrange Joomla SCIM plugin allows you to map user attributes from your Identity Provider (IdP) to Joomla's user profile fields. This ensures user data like username, email, or name is automatically updated in Joomla during SCIM-based user provisioning. You can add, modify, or remove attribute mappings as needed. It simplifies and automates user profile synchronization between your IdP and Joomla. Just configure the mapping and click "Save Extended Attribute Mapping" to apply.

• The Role Mapping tab allows you to manage how user roles are assigned during SCIM user provisioning.You can define the parent user group under which new SCIM roles will be created in Joomla.
• Additionally, you can pre-select one role to be automatically assigned to all SCIM users.This ensures users are provisioned with the correct access level and permissions right from creation.It simplifies user role management and maintains consistency across your Joomla site.

• The Advance Settings tab allows you to define how Joomla should handle users when they are deactivated from the SCIM Server. You can choose to do nothing, deactivate the user, or delete the user from Joomla.
• This helps maintain user consistency between your SCIM Server and Joomla site. It supports automated user lifecycle management based on SCIM events. Simply select the preferred option and click Save Settings to enforce it.

• Click on the Upgrade Plans tab to check out our complete list of features and various licensing plans. OR you can click here to check features and licensing plans.
• If you want to purchase any of the paid version of the plugin, you have to register/login with us in Account Setup tab. OR you can register/login here.

Additional Resources.

• How to configure SCIM with Azure AD
• How to configure SCIM with Google Apps
• How to configure SCIM with CyberArk
• How to configure SCIM with Centrify