Centrify SCIM – Automated User Provisioning in WordPress

SCIM User Provisioning in Centrify with WordPress

SCIM plugin for WordPress gives you the ability to automate user creation, update and delete process from existing IdP (Identity Provider) to your Wordpress site. SCIM is an open standard for securely Syncing / synchronizing user information between multiple applications. Here we will go through a step-by-step guide to enable SCIM user sync between WordPress site and Centrify SCIM as Identity Provider.

Pre-requisites : Download And Installation

To configure Centrify as SAML IdP with WordPress, you will need to install the miniOrange SAML SP SSO plugin for WordPress:

SCIM user provisioning

By miniOrange

(1)

SCIM User Provisioning plugin, Create, Update, delete users from Azure AD, Okta, OneLogin, G-suite, Centrify, JumpCloud, Idaptive, Gluu, WS02 and all SCIM …

 Tested upto 6.2

Get this plugin

To get the premium plugin, please contact us at samlsupport@xecurify.com

Follow the steps below for configuring Centrify SCIM user provisioning in WordPress

Step 1: Configure Centrify SCIM user provisioning in WordPress

• Go to SCIM Configurations tab to get SCIM base URL and SCIM bearer Token these will be used later.

• Configure Centrify for SSO
• In your Centrify account, add a new custom app.
• In the application, setup your SAML SSO Configuration.
• Now navigate to Account Mapping and configure like the following:

• Navigate to Provisioning tab.
• Enable Enable provisioning for this application.
• Enter the SCIM base URL in SCIM Service URL from the SCIM Configuration tab of the SCIM user provisioning plugin.
• In Authorization Type, enable Authorization Header.
• Enter the SCIM Bearer Token in Bearer Token from the SCIM Configuration tab of the SCIM user provisioning plugin.

• Once complete, click on Verify.
• In the Role Mappings section be sure to set up the Role as "User".

Step 2: Additional Feature Configurations [Available in premium plan]

  Set Default Role for New Users

When new users are created via SCIM provisioning, you can automatically assign roles:

• Go to Advanced Settings >> Default Role Provisioning
• Choose the role you want the new users to have (e.g. Manager)
• Turn on Update Existing User Role if you want already existing users’ roles to be updated during provisioning.


  User Activation Status

You can easily check whether users are active or inactive.

• When enabled, a new column appears in the Users List in the WordPress dashboard.
• It shows whether each users is:
  • Activated (active in your IdP)
  • Deactivated (inactive in your IdP)
• This status updates automatically whenever users are added or removed via SCIM provisioning and deprovisioning.


  Content Reassignment on User Deprovisioning

When a user is deleted via SCIM provisioning, you can decide what happens to their content.

• Choose a Default Content Owner to automatically take ownership of the content.
• Or select Do Not Reassign to permanently delete all the content.


  Select Subsites for SCIM User Provisioning

• Select the subsites where users should be assigned after SCIM provisioning.
• Users will only get access to the selected subsites in the network.
• This helps to control access, restrict user assignment to specific subsites only, and keep user permissions organized.

You have successfully configured the miniOrange SCIM User Provisioning plugin for WordPress with Centrify.

SCIM User Provisioning plugin also supports provisioning for other IDP's like Okta ,Cognito,OneLogin,Salesforce, Ping Identity, WSO2, GSuite, GitHub and many more.

Additional Resource

• What is SCIM User Provisioning?
• User Data Synchronization

Other Supported IDPs

Azure AD

Okta

Google Apps

One Login

PingOne

Custom IDP

If you are looking for anything which you cannot find, please drop us an email on samlsupport@xecurify.com