Okta

1. Enable SCIM

1. Open the application that is configured for the SAML in the Okta admin dashboard. click the edit.

   

2. Toggle on the SCIM, and Save.

   

2. Add the SCIM Connector to Okta Settings

1. In the Provisioning tab, add https://api.alloy.co/scim/v2 in the SCIM connector base URL. and, email to the Unique identifier field for users. Enable the actions you want in the “Supported provisioning actions”.
   (Please note:💡 ”SCIM connector base URL” might differ for different environments.)

   

2. Add the Authentication. We only support “Basic auth“ currently. please reference to https://developer.alloy.com/public/docs/authentication-guide

   1. For Basic Auth. use the workflow_token as Username and workflow_secret as password.

      
   
   

3. Click “Test Connector Configuration”, you should see the “Connector configured successfully” message

4. Save the integration changes.

5. Enable the “Create Users”, “Update User Attributes” and “Deactivate Users” in the “To App” tab. Based on the use case, customers can choose to enable/disable them.
   (Please note:💡 The ”To App” tab will only show after saving the integration setting”)

   

6. Remove useless Attribute Mappings in “To App”. we only need “username”, “Given name”, “Family name”, “Email”, Display name”, and “Primary phone”. ("Primary phone" is optional.)

7. In the To Okta tab, make sure the Email Address is selected for Okta username format.

8. (Optional) Remove useless Attribute Mapping in the “To Okta” tab.

3. Assign the Okta user to the Alloy app.

• Assign by individual. It will push individual users to the alloy.
  
  
• Assign by Groups. It will push all the people in the group to the alloy.
  
  
  

1. To remove the user

   1. For added type individual, click the ‘X’ button on the “People” tab.

      

   2. For added type Grop, click the ‘X’ button on the “Groups” tab. It will remove all the users in the groups from Alloy.

      

4. Push Okta Groups as Roles in Alloy

1. Push groups to the Alloy. The group is equivalent to the role in the Alloy. Push group will assign the role for the user which was pushed to the Alloy.

   

2. To remove the group(role), click the Unlink pushed group. it will remove the group(role) from the Alloy. and set the Empty role for the users who are in the group(role)

   

5. Import Alloy User and Groups to Okta (Optional)

1. Make sure to select the User Creation& Matching rule that matches to your use case in the Provisioning → To Okta tab.

   

2. Click Import Now in the Import tab.

   

3. If auto-confirm was not selected, it will show all the match results for manual User assignment. Confirm the user assignment.