OneLogin User Provisioning Into WordPress Using SCIM Standard

SCIM User Provisioning with OneLogin

SCIM plugin for WordPress gives you ability to automate user creation, updation and deletion process from existing Identity Provider to your WordPress site. The System for Cross-domain Identity Management (SCIM) is an open standard for securely synchronizing user information between multiple applications. Here we will go through a step-by-step guide to enable SCIM user sync between WordPress site and OneLogin by considering OneLogin as Identity Provider.

Pre-requisites : Download And Installation

To configure OneLogin as SAML IdP with WordPress, you will need to install the miniOrange SAML SP SSO plugin for WordPress:

SCIM user provisioning

By miniOrange

(1)

SCIM User Provisioning plugin, Create, Update, delete users from Azure AD, Okta, OneLogin, G-suite, Centrify, JumpCloud, Idaptive, Gluu, WS02 and all SCIM …

 Tested upto 6.2

Get this plugin

To get the premium plugin, please contact us at samlsupport@xecurify.com

Follow the steps below for configuring OneLogin SCIM user provisioning in WordPress

Step 1: Configure OneLogin user provisioning in WordPress

• Go to SCIM Configuration Tab to find information required to configure in Onelogin's SCIM Provisioner.

• Log in to your Onelogin Portal. Add SCIM Provisioner with SAML.

• Start configuring it by adding Display Name.

• Go to Configuration Tab. Enter SCIM Base URL, SCIM Bearer Token (which you will find in Step 1 above).
• Enable provisioning from SCIM Provisioner with SAML application.

• Once done with configuration, add new user.

• Approve the provisioing request. On success, status will change to 'provisioned'.

Step 2: Additional Feature Configurations [Available in premium plan]

  Set Default Role for New Users

When new users are created via SCIM provisioning, you can automatically assign roles:

• Go to Advanced Settings >> Default Role Provisioning
• Choose the role you want the new users to have (e.g. Manager)
• Turn on Update Existing User Role if you want already existing users’ roles to be updated during provisioning.


  User Activation Status

You can easily check whether users are active or inactive.

• When enabled, a new column appears in the Users List in the WordPress dashboard.
• It shows whether each users is:
  • Activated (active in your IdP)
  • Deactivated (inactive in your IdP)
• This status updates automatically whenever users are added or removed via SCIM provisioning and deprovisioning.


  Content Reassignment on User Deprovisioning

When a user is deleted via SCIM provisioning, you can decide what happens to their content.

• Choose a Default Content Owner to automatically take ownership of the content.
• Or select Do Not Reassign to permanently delete all the content.


  Select Subsites for SCIM User Provisioning

• Select the subsites where users should be assigned after SCIM provisioning.
• Users will only get access to the selected subsites in the network.
• This helps to control access, restrict user assignment to specific subsites only, and keep user permissions organized.

You have successfully configured the miniOrange SCIM User Provisioning plugin for WordPress with OneLogin.

SCIM User Provisioning Add-On also supports provisioning for other IDP's like Okta ,Cognito,OneLogin,Salesforce, Ping Identity, WSO2, GSuite, GitHub and many more.

Additional Resource

• What is SCIM User Provisioning?
• User Data Synchronization

Other Supported IDPs

Azure AD

Centrify

Okta

Google Apps

PingOne

Custom IDP

If you are looking for anything which you cannot find, please drop us an email on samlsupport@xecurify.com