SCIM User Provisioning
for Joomla

The miniOrange Joomla SCIM User Provisioning extension is a plugin that automates user lifecycle management between your Identity Provider (IdP) and a Joomla site using the SCIM 2.0 protocol. When a user is created, updated, or deactivated in your IdP, such as Azure AD, Okta, or Google Workspace, those changes are instantly reflected in Joomla without any manual intervention. This eliminates outdated profiles, prevents orphaned accounts, and keeps your Joomla user directory in sync with your organization's authoritative user store at all times.

The extension supports all major enterprise identity providers that implement the SCIM 2.0 standard, including Microsoft Entra ID (formerly Azure AD), Okta, Google Workspace, OneLogin, Keycloak, and miniOrange itself. Because SCIM is an open protocol, any standards-compliant IdP can push user events to Joomla through the extension. For identity providers that do not natively support SCIM, miniOrange also offers an API-based User Sync extension as an alternative provisioning method.

Yes. When a user is disabled or deleted in your identity provider, SCIM sends a corresponding event to Joomla, and the extension immediately removes or deactivates that account. This ensures that ex-employees, contractors, or deactivated partners lose access to your Joomla site the moment their IdP account is revoked, with no manual cleanup required by a Joomla administrator. This behavior is critical for both security and compliance.

Yes, on both counts. The extension supports attribute mapping for standard SCIM fields (name, email, department, phone) as well as custom Joomla profile fields. Any attribute your IdP pushes can be mapped to the corresponding Joomla user field. Role assignment is also supported, so you can automatically assign Joomla user groups based on IdP attributes such as department, job title, or group membership, making it easy to separate employees, partners, or contractors without manual role management.

Yes. The extension supports multi-IdP environments, allowing you to sync users from several cloud directories, such as Azure AD, Okta, and Google Workspace, into a single Joomla instance simultaneously. The Premium Plan is licensed per Joomla instance, and volume discounts are available for organizations running multiple Joomla sites by contacting the miniOrange sales team.

The extension is available under a Premium Plan priced at $399 per year per Joomla instance. A free trial is available, and you can submit your details on the product page to get started. For organizations managing multiple sites, volume discount pricing is available on request. There is no one-time perpetual license; access and updates are delivered under the annual subscription model.