Setup Google Apps as a SCIM Client and Joomla as a SCIM Server

Overview

Joomla SCIM plugin gives you ability to automate user creation, updation and deletion process from existing Identity Provider to your Joomla site. The System for Cross-domain Identity Management (SCIM) is an open standard for securely synchronizing user information between multiple applications. Here we will go through a step-by-step guide to enable SCIM user sync between Joomla site and Google Apps as Identity Provider.
kindly visit our page here.

Step 1: Install Joomla SCIM User Provisioning Plugin

• Download the zip file for the miniOrange SCIM User provisioning plugin for Joomla from the here.
• Now go to the System -> under Install section -> click on Extensions

• Now under Upload Package File click on browse for file then select zip file of SCIM User Provisioning plugin.

Step 2: Configure Joomla as SCIM Server

• Download Joomla SCIM Plugin, then go to SCIM Configurations tab to get SCIM base URL and SCIM bearer Token .

Note: These information are required to configure your application Google Apps as IDP.

Step 3: Configure Google / G-Suite as SCIM Client

• Navigate to Google Admin Console and login to your admin account.

Note: Sign in using your administrator account.

• From the left menu bar, click on Apps -> select Web and mobile apps.

• Click on Add App and search for "keeper".

How to set up a keeper in google apps:

• You can Download Metadata from the Google Identity Provider details section of Google Apps as IDP. This information will be required to configure Joomla as a SAML SP, so keep it handy. And then click on the Continue button.

Service Provider Details:

• Now you need to configure the Joomla SAML SP plugin with Keeper. You can download the SAML SP plugin from here.
• On the Service Provider Details screen, you need to add ACS URL and Entity ID.

• Navigate to Joomla SAML SP Service Provider tab, now copy ACS URL and Entity ID.

• Now navigate to Google apps and paste the ACS URL, Entity ID into the Service Provider Details and select "Signed Response" and select Continue.

• Now, navigate to the Autoprovisioning section of the application and enter your required information.

• Paste the SCIM Base URL into the Endpoint URL field and the SCIM Bearer Token into the App authorization field from step 2

• In the Keeper app, select SAML attribute mapping to map the user attributes.

• Then, click on Save button to save your configuration.
• Now, turn on Autoprovisioning in the Settings of the app.

• Change the User Access status to On for everyone in the SAML SSO app.
• You have successfully configured the Joomla User Provisioning and Sync Plugin with Google Apps/G-Suite.

Step 4: Premium features

The following features are part of the premium version of the miniOrange Joomla SCIM plugin. A premium license is required to access and configure these settings.

• The SCIM Mapping tab in the miniOrange Joomla SCIM plugin allows you to map user attributes from your Identity Provider (IdP) to Joomla's user profile fields. This ensures user data like username, email, or name is automatically updated in Joomla during SCIM-based user provisioning. You can add, modify, or remove attribute mappings as needed. It simplifies and automates user profile synchronization between your IdP and Joomla. Just configure the mapping and click "Save Extended Attribute Mapping" to apply.

• The Role Mapping tab allows you to manage how user roles are assigned during SCIM user provisioning.You can define the parent user group under which new SCIM roles will be created in Joomla.
• Additionally, you can pre-select one role to be automatically assigned to all SCIM users.This ensures users are provisioned with the correct access level and permissions right from creation.It simplifies user role management and maintains consistency across your Joomla site.

• The Advance Settings tab allows you to define how Joomla should handle users when they are deactivated from the SCIM Server. You can choose to do nothing, deactivate the user, or delete the user from Joomla.
• This helps maintain user consistency between your SCIM Server and Joomla site. It supports automated user lifecycle management based on SCIM events. Simply select the preferred option and click Save Settings to enforce it.

• Click on the Upgrade Plans tab to check out our complete list of features and various licensing plans. OR you can click here to check features and licensing plans.
• If you want to purchase any of the paid version of the plugin, you have to register/login with us in Account Setup tab. OR you can register/login here.

Additional Resources.

• How to configure SCIM with Azure AD
• How to configure SCIM with Okta
• How to configure SCIM with CyberArk
• How to configure SCIM with Centrify