Setup CyberArk as a SCIM Client and Joomla as a SCIM Server

Overview

Joomla SCIM plugin gives you ability to automate user creation, updation and deletion process from existing Identity Provider to your Joomla site. The System for Cross-domain Identity Management (SCIM) is an open standard for securely synchronizing user information between multiple applications. Here we will go through a step-by-step guide to enable SCIM user sync between Joomla site and CyberArk as Identity Provider.
kindly visit our page here.

Step 1: Install Joomla SCIM User Provisioning Plugin

• Download the zip file for the miniOrange SCIM User provisioning plugin for Joomla from the here.
• Now go to the System -> under Install section -> click on Extensions

• Now under Upload Package File click on browse for file then select zip file of SCIM User Provisioning plugin.

Step 2: Configure Joomla as SCIM Server

• Download Joomla SCIM Plugin, then go to SCIM Configurations tab to get SCIM base URL and SCIM bearer Token .

Note: These information are required to configure your application CyberArk as IDP.

Step 3: Automated User Provisioning with CyberArk

• Login into your CyberArk Admin Console.

Note: You can setup Single Sign-On (SSO) into Joomla as SAML SP with CyberArk as IDP by following the steps give here.

• Click on the Provisioning tab.
• Select Enable provisioning for this application then click on Save.

• Open a popup SCIM Provisioning window then click on Yes button.

• Select Preview or Live Mode according to your requirement.

• Enter SCIM Base URL in the SCIM Service URL text field.

• Select Authorization Type.

Note: The Authorization Type determines what information is required and where to find the information.

OAuth 2.0	This Authorization Type uses a workflow to authorize access. The Authorization Header directly provides credentials.
Authorization Header	Required choosing a header type

• In Authorization Type fill all the required information:

If you choose OAuth 2.0 required infromation from here.

• Authorize URL: Copy and paste Authorize URL from the Configure OAuth tab in the Joomla OAuth/OpenId connect client Plugin
• Access Token URL: Copy and paste Authorize URL from the Configure OAuth tab in the Joomla OAuth/OpenId connect client Plugin
• Client ID: Copy and paste Client ID from the Configure OAuth tab in the Joomla OAuth/OpenId connect client Plugin
• Client Secret: Copy and paste Client Secret from the Configure OAuth tab in the Joomla OAuth/OpenId connect client Plugin
• Scope: Copy and paste Scope from the Configure OAuth tab in the Joomla OAuth/OpenId connect client Plugin

Authorization Header

• If you select Authorization Header require you to choose Header Type.
• Select Bearer Token if your app requires the header in the format: Bearer .
• Select Basic if your app requires authentication in the format: HTTP BASIC.
• Select Direct if your app uses some other format.

• Select Bearer Token.
• Copy SCIM Bearer Token from the SCIM Configuration tab and paste the Bearer Token text field.
• Click on Verify and Save button to save your SCIM Provisioning information.

• You have successfully configured the miniOrange Joomla SCIM User Provisioning Plugin with CyberArk.
• Click on the Upgrade Plans tab to check out our complete list of features and various licensing plans. OR you can click here to check features and licensing plans.
• If you want to purchase any of the paid version of the plugin, you have to register/login with us in Account Setup tab. OR you can register/login here.

Additional Resources.

• How to configure SCIM with Azure AD
• How to configure SCIM with Google Apps
• How to configure SCIM with CyberArk
• How to configure SCIM with Centrify