Automatic User Provisioning and Sync Between Joomla and Okta

Okta User Sync is an easy-to-use plugin for Joomla and it's primary function is to facilitate the synchronization of user data between Okta, an identity management platform, and Joomla. This synchronization process ensures that user information remains consistent across both platforms. The plugin offers ease of use, making it simple for administrators to manage user data. It provides various options for provisioning users, including manual input, on-demand updates, or scheduled synchronization. This flexibility allows administrators to efficiently handle user management tasks while maintaining security and simplicity.

Pre-requisites : Download And Installation

Setup Joomla User Sync with Okta

1. Install the User Provisioning Plugin

• Download the zip file for the miniOrange User Provisioning/User Sync plugin from the link here .
• Login into your Joomla site’s administrator console.
• From Menu, click on System, then under Install section click on Extensions.
• Upload the downloaded zip file to install the User Provisioning/User Sync plugin.
• Installation of the plugin is successful. Now click on Get Started! button.

• Select 'Okta' from the list of providers.

2. Setup Okta for User Provisioning

To enable user provisioning from Okta to Joomla, we must configure the following values:

Okta Base URL:

• This will be the base URL for the Org Authorization Server or your Okta Domain. For example - https://${Your Okta Domain}".

Okta Bearer Token:

• To generate your Okta Bearer Token, log into your Okta Dashboard.
• From the left menu bar click on the Security option and from the dropdown sub-menu, click on the API option.

• On the API page, click on Tokens options and then click on the Create token button.

• In the create token window, enter the name for the token and click on Create token button.

• Now the Bearer Token is generated. To copy the Token Value, you can simply click on the clipboard icon.

• Once the token is successfully created, you will see a token as shown below.

• Go to the Configure Okta tab of the User Sync plugin and paste the copied bearer token in the Bearer Token text field.

• In the Test Username field you will have to enter the user email id which is present in your Okta portal and click on the Save Configuration button.

• Click on the Test Connection button. If the connection is successful, you will receive a success message as shown below:

3. Sync User to Joomla Database

• Navigate to the tab Okta -> Joomla. Under the User Attribute Mapping section map the Okta AD attribute name to the respective Joomla Attribute Name and click on Save Configuration.

  Sync an Individual User or All Users

• Select the UserPrincipleName / ID of any user of your Okta application.
• Click on the Create User button to create your Okta user to your Joomla site Database.
• Or click on the Create All Users button to sync all users from the Okta users to your Joomla site Database. (Note: This is a Premium Feature.)

  Sync User Groups (Premium Feature)

• Under the Sync User Groups, you can select the default user groups from Okta to Joomla user groups. Also, select default group for the new/login users.

  Set User Sync Interval (Premium Feature)

• Under Set User Sync Interval section, set up a schedule for automatic user synchronization on a hourly, daily, or weekly basis.

4. Sync User from Joomla Database to Okta

  Create and Delete User

• Navigate to the tab Joomla -> Okta. Here, under the Create an Individual User section, any user created in Joomla will sync automatically and get created in Okta.
• Under the Delete User section, you can delete an individual user from Okta. (Note: This is a premium feature.)

  Automatic Provisioning (Premium Feature)

• Under the Automatic Provisioning section, you can automate provisioning whenever a user is created, deleted and updated. You can also enable automatic sync of Joomla user password.

  Sync User Attributes and Set Interval (Premium Feature)

• Under the Sync User Attribute tab, you can select the default group for the new/login user map user attributes from Joomla to Okta.
• You can also set up a schedule for automatic user synchronization, under the Set User Sync Interval tab.

You have successfully configured Okta User Sync with Joomla. If you are looking for anything which you cannot find, please drop us an email on joomlasupport@xecurify.com.

Additional Resources

• What is SCIM User Provisioning?
• SCIM (User Provisioning) with Okta
• SCIM (User Provisioning) with OneLogin
• Frequently Asked Questions (FAQs)