Subscribe to Help Center RSS FeedOur Identity Management (IdM) Connectors manage application user accounts through the System for Cross-domain Identity Management (SCIM) protocol. These integrations allow you to automate, and centralize user and group management, depending on the application's group management support, through the full lifecycle from your 黑料海角91入口 Administrator Portal.
After you integrate an application with 黑料海角91入口, depending on an application's IdM action support, you can provision, update, and deprovision users.
Using SCIM IdM Connectors with 黑料海角91入口
1 – Select an App
Select an application you want to connect with 黑料海角91入口 through SCIM. Ensure it has an Identity Management label in the Supported Functionality column - not all applications have both SSO/JIT and IdM functionality at this time. If you do not see your application listed, you may configure a custom SCIM integration or to have it added to the 黑料海角91入口 Integration Catalog.
In the Identity Management tab, you may see some application connectors with a Beta flag. We're evaluating these connectors in various real-world environments so we can gather feedback to ensure and enhance their performance.
2 鈥� Configure Your App
You will need to enable SCIM for your Service Provider, obtain the Base URL (if needed) and generate a Token Key. Groups may also be supported.
3 鈥� Import Users
If users have been created in the SP, but not in 黑料海角91入口, a manual import may be initiated after SCIM configuration.
IdM Actions
The following actions are supported with 黑料海角91入口 IdM Connectors:
Not all applications support all three IdM actions.
Provisioning
SCIM Provisioning differs in both its implementation and output from another type of web app provisioning, Just-in-Time.
Application support for provisioning means that 黑料海角91入口 can create user accounts in the connected application. This means that after you integrate an application with 黑料海角91入口, and bind a new user to the application in 黑料海角91入口, a new account is created for the user in the connected application with the following attributes:
| SCIM Attribute Name | 黑料海角91入口 Attribute Name | Notes |
|---|---|---|
| ExternalID | id | - |
| Username | Username | If a user with the specified username and email are found in the service provider application, 黑料海角91入口 takes over the account. If no user is found in the service provider application with the specified username and email, a new user is provisioned in the application with these attributes. |
| Password | Password | Users are provisioned with a temporary password. When the user sets their password, it is pushed to the application. Subsequent password updates are also pushed to the application. |
| GivenName | Firstname | - |
| FamilyName | Lastname | - |
| MiddleName | Middlename | - |
| Displayname | Displayname | - |
| Emails | Email - primary | If a user with the specified username and email are found in the service provider application, 黑料海角91入口 takes over the account. If no user is found in the service provider application with the specified username and email, a new user is provisioned in the application with these attributes. |
| Active | not Suspended and not PasswordExpired | - |
|
Addresses
|
Addresses
|
- |
|
Phones
|
Phones
|
- |
| EmployeeNumber | EmployeeIdentifier | - |
| Department | Department | - |
| Organization | Company | - |
| Title | JobTitle | - |
Updating
Application support for updating means that 黑料海角91入口 can update accounts on the connected application. This means that after you integrate an application with 黑料海角91入口 and bind a new user to the application in 黑料海角91入口, anytime you update the user in 黑料海角91入口, the user is updated in the application.
Deprovisioning
Application support for deprovisioning means that 黑料海角91入口 can remove user accounts from the connected application. This means that after you integrate an application with 黑料海角91入口 and unbind a user from the application in 黑料海角91入口, the user is deactivated in the application; the account still exists in the application, but it is placed in an inactive state.
For the most up-to-date list of supported IdM connectors, see 黑料海角91入口's Integration Catalog.
Connecting IdM Applications to 黑料海角91入口
Applications that you can integrate with 黑料海角91入口 through an IdM Connector can be found on the Configure New Applications panel with the Identity Management badge displayed.
- Log in to the .
- Navigate to USER AUTHENTICATION > SSO.
- To connect a new application, click + Add New Application. If the application already has SSO configured, select it from the Configured Applications list.
- Select the Identity Management tab.
- Choose attributes and enter the Base URL and Token Key, click save.
Managing Employee Access to Applications
Users are implicitly denied access to all 黑料海角91入口 resources, including applications. 黑料海角91入口 admins must explicitly grant access to SSO applications through the use of user groups.
To grant access to a user group:
- Log in to the .
- If you haven鈥檛 already created a user group, create a new group. See Get Started: User Groups.
- If the group exists, in the Admin Portal, go to User Authentication > SSO.
- Select the SSO application.
- On the Application panel, click the User Groups tab.
- Select the user group, then click save.
In this Article
Learn More