Setup miniOrange as a SCIM Client and Joomla as a SCIM Server

Overview

miniOrange provides a ready to use solution for Joomla User Provisioning using SCIM (System for Cross-domain Identity Management) standard. This solution ensures that you can sync add, update, delete, and deactivate user operations with Joomla using the SCIM User Provisioner plugin.

Step 1: Install Joomla SCIM User Provisioning Plugin

• Download the zip file for the miniOrange SCIM User provisioning plugin for Joomla from the here.
• Now go to the System -> under Install section -> click on Extensions

• Now under Upload Package File click on browse for file then select zip file of SCIM User Provisioning plugin.

Step 2: Configure Joomla as SCIM Server

• Navigate to the SCIM Configuration tab to find the SCIM Base URL and SCIM Bearer Token, which will be handy for you.

Step 3: Configure miniOrange as SCIM Client

Case 1: Only Provisioning (Just want to enable provisioning through miniOrange)

• Login into your miniOrange Admin console.
• Navigate to the Apps section in the left side.

• Click on + Add Application button.

• Then select PROVISIONING.

• Select on SCIM Client (Source).

• Enter your Custom Application Name, SCIM Base URL and Bearer token copied from the SCIM Configuration tab of the Joomla SCIM user provisioning Plugin.

• You can also send your desired attributes from your IDP to Joomla by simply adding the Target Attributes and selecting the value of those attributes in miniOrange Attributes.

Note: The following attributes are required for SCIM User Provisioning in Joomla.

• Click on Save.

Case 2: If you want user provisioning (SCIM) using SAML SSO

• Navigate to the Apps -> + Add Application -> SAML/WS-FED.

• Here you can search for Joomla, then select Joomla (SAML).

• Enter Custom Application Name as per your choice.

Note: Click here if you want to configure miniOrange as Identity provider and Joomla as Service Provider.

• Go to the Provisioning tab and Enter SCIM Base URL, Bearer token copied from the SCIM Configuration tab of the Joomla SCIM User Provisioning Plugin.

• You can also send your desired attributes from your IDP to Joomla by simply adding the Target Attributes and selecting the value of those attributes in miniOrange Attributes.

Note: The following attributes are required for SCIM User Provisioning in Joomla.

• Click on Save.

Step 4: Enable Provisioning Features

• This feature allows you to enable automatic provisioning/de-provisioning of users in the app when a user gets created, updated or deleted in miniOrange.
• Click on the toggle switch of the feature you want to provide with automatic provisioning or de-provisioning.

• You have successfully configured the miniOrange Joomla SCIM User Provisioning Plugin with miniOrange.

Step 5: Premium features

The following features are part of the premium version of the miniOrange Joomla SCIM plugin. A premium license is required to access and configure these settings.

• The SCIM Mapping tab in the miniOrange Joomla SCIM plugin allows you to map user attributes from your Identity Provider (IdP) to Joomla's user profile fields. This ensures user data like username, email, or name is automatically updated in Joomla during SCIM-based user provisioning. You can add, modify, or remove attribute mappings as needed. It simplifies and automates user profile synchronization between your IdP and Joomla. Just configure the mapping and click "Save Extended Attribute Mapping" to apply.

• The Role Mapping tab allows you to manage how user roles are assigned during SCIM user provisioning.You can define the parent user group under which new SCIM roles will be created in Joomla.
• Additionally, you can pre-select one role to be automatically assigned to all SCIM users.This ensures users are provisioned with the correct access level and permissions right from creation.It simplifies user role management and maintains consistency across your Joomla site.

• The Advance Settings tab allows you to define how Joomla should handle users when they are deactivated from the SCIM Server. You can choose to do nothing, deactivate the user, or delete the user from Joomla.
• This helps maintain user consistency between your SCIM Server and Joomla site. It supports automated user lifecycle management based on SCIM events. Simply select the preferred option and click Save Settings to enforce it.

• Click on the Upgrade Plans tab to check out our complete list of features and various licensing plans. OR you can click here to check features and licensing plans.
• If you want to purchase any of the paid version of the plugin, you have to register/login with us in Account Setup tab. OR you can register/login here.

Additional Resources.

• How to configure SCIM with Azure AD
• How to configure SCIM with Google Apps
• How to configure SCIM with Okta
• How to configure SCIM with Centrify