- \n
- A 黑料海角91入口 administrator account<\/li>\n\n\n\n
- 黑料海角91入口 SSO Package or higher or SSO \u00e0 la carte option<\/li>\n\n\n\n
- An administrator account in Personio<\/li>\n\n\n\n
- For SSO, you must be on the Personio Enterprise plan<\/li>\n\n\n\n
- Your Personio URL (e.g., https:\/\/{mycompany}.personio.de)<\/li>\n\n\n\n
- Read access to the Personio employees\u2019 API and to specific attributes available through that API for a successful integration<\/li>\n<\/ul>\n\n\n\n
Important<\/strong> Considerations<\/strong><\/p>\n\n\n\n
- \n
- You must set up the integration in the Personio application first and then in 黑料海角91入口<\/li>\n\n\n\n
- To set up both SSO and Identity Management (IdM), two separate app connectors are needed:\n
- \n
- Personio IdM connector<\/a> using the Personio prebuilt application connector<\/li>\n\n\n\n
- Personio SSO connector<\/a> using a Custom OIDC application connector<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- When generating the integration credentials in Personio, leave the default mapped attributes in the scopes. Choosing unneeded attributes can cause the integration to timeout and fail\n
- \n
- If scopes are added or removed<\/a>, the existing credentials are revoked and the integration will stop working until new credentials are generated<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- When importing new users and updates for existing users, the statuses that are classified as inactive for this integration are: Leave <\/strong>and Inactive<\/strong>:\n
- \n
- Users will not be created in 黑料海角91入口 if they have one of these statuses in Personio<\/li>\n\n\n\n
- When a user\u2019s status changes <\/strong>to either Leave <\/strong>or Inactive<\/strong>, the user will automatically be suspended in 黑料海角91入口<\/li>\n\n\n\n
- When a user\u2019s status changes from either Leave <\/strong>or Inactive <\/strong>to Onboarding <\/strong>or Active <\/strong>and the reactivationAllowed<\/kbd> option is set to true, the user\u2019s state in 黑料海角91入口 will change from Suspended <\/strong>to Active<\/strong><\/li>\n\n\n\n
- When a user\u2019s status changes from either Leave <\/strong>or Inactive <\/strong>to Onboarding <\/strong>or Active <\/strong>and the reactivationAllowed option is set to false, the user will remain suspended in 黑料海角91入口 until you change the user state back to Active<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- \u200b\u200b\u200b\u200b\u200b\u200bThe timestamp in the User Import Complete<\/strong> email is UTC<\/li>\n<\/ul>\n\n\n\n
Attribute Considerations<\/strong><\/p>\n\n\n\n
- \n
- A default set of attributes are managed for users. See the Attribute Mappings<\/a> section for more details<\/li>\n<\/ul>\n\n\n\n
\u200b\u200b\u200b\u200b\u200b\u200bConfiguring the Identity Management Integration<\/strong><\/h2>\n\n\n\n
To configure Personio<\/strong><\/h3>\n\n\n\n
- \n
- Log into Personio.<\/li>\n\n\n\n
- Go to Marketplace <\/strong>from the left navigation panel.<\/li>\n\n\n\n
- Search for 黑料海角91入口 <\/strong>and click it.<\/li>\n\n\n\n
- Click Connect.<\/strong><\/li>\n\n\n\n
- Click Generate new credentials.<\/strong><\/li>\n\n\n\n
- Copy the Client ID<\/strong> and Client Secret<\/strong>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nThe Client ID and Secret (token) may only be shown once. Copy them to a secure location, like the 黑料海角91入口 Password Manager<\/a>, for future reference.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To configure 黑料海角91入口<\/strong><\/h3>\n\n\n\n
- \n
- Log in to 黑料海角91入口 Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nIf you would like to use the Staged<\/strong> user state to make it easier to identify users who have been imported and to complete the onboarding process without granting access, complete the following steps. You can learn more about the Staged user state in the Manage User States<\/a> article.<\/p>\n\n\n\n
- \n
- Go to Users > Settings<\/strong>.<\/li>\n\n\n\n
- In the Application \/ Directory Integrations <\/strong>dropdown, <\/strong>select Staged<\/strong>.<\/li>\n\n\n\n
- Click Save.<\/strong><\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Navigate to DIRECTORY INTEGRATIONS > HR Directories<\/strong>.<\/li>\n\n\n\n
- In the Personio <\/strong>tile, click Configure > + Create New Application.<\/strong><\/li>\n\n\n\n
- Click Next <\/strong>and then enter a Display Label<\/strong>. Optionally, you can enter a Description<\/strong> and Display Option<\/strong> for the application.<\/li>\n\n\n\n
- In the Bookmark <\/strong>field, enter your application URL (e.g., https:\/\/{mycompany}.personio.de).<\/li>\n\n\n\n
- Optionally, if you are configuring a separate SSO connector, we recommend unchecking the Show this application in User Portal<\/strong> option, to avoid confusion for users about which Personio app to select for SSO in the User Portal.<\/li>\n\n\n\n
- Click Save Application<\/strong> and then Configure Application<\/strong>. <\/li>\n\n\n\n
- On the Identity Management<\/strong> tab, click Configure<\/strong>.<\/li>\n\n\n\n
- You\u2019re presented with two fields:\n
- \n
- Client ID<\/strong> – copy and paste the Client ID generated in the previous section<\/li>\n\n\n\n
- Client Secret<\/strong> – copy and paste the Client Secret generated in the previous section<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Click Activate.<\/strong><\/li>\n<\/ol>\n\n\n\n
To rotate the Personio credentials<\/strong><\/h3>\n\n\n\n
- \n
- In 黑料海角91入口, deactivate<\/a> the existing Identity Management integration.<\/li>\n\n\n\n
- In Personio, go to Settings > API credentials<\/strong>.<\/li>\n\n\n\n
- Click Generate new credential<\/strong> and select 黑料海角91入口 from the dropdown menu.<\/li>\n\n\n\n
- Select the needed permissions and attributes.<\/li>\n\n\n\n
- Click Generate new credential<\/strong>.<\/li>\n\n\n\n
- Copy the Client ID and Client Secret.<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>Warning:<\/strong> \nThe Client ID and Secret (token) may only be shown once. Copy them to a secure location, like the 黑料海角91入口 Password Manager<\/a>, for future reference.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- In 黑料海角91入口, select the Identity Management<\/strong> tab of the Personio app and click Configure<\/strong>.<\/li>\n\n\n\n
- You\u2019re presented with two fields:\n
- \n
- Client ID<\/strong> – copy and paste the Client ID generated in the previous steps<\/li>\n\n\n\n
- Client Secret<\/strong> – copy and paste the Client Secret generated in the previous steps<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Click Activate.<\/strong><\/li>\n<\/ol>\n\n\n\n
Attribute Mappings<\/strong><\/h2>\n\n\n\n
The following table lists attributes that 黑料海角91入口 sends to the application. See Attribute Considerations<\/a> for more information regarding attribute mapping considerations. <\/p>\n\n\n\n
Learn about 黑料海角91入口 Properties and how they work with system users in our API<\/a>. <\/p>\n\n\n\n
\nPersonio User Attributes<\/h3>\n
\n - Client Secret<\/strong> – copy and paste the Client Secret generated in the previous steps<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- You\u2019re presented with two fields:\n
- In Personio, go to Settings > API credentials<\/strong>.<\/li>\n\n\n\n
- Client Secret<\/strong> – copy and paste the Client Secret generated in the previous section<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- In the Personio <\/strong>tile, click Configure > + Create New Application.<\/strong><\/li>\n\n\n\n
- In the Application \/ Directory Integrations <\/strong>dropdown, <\/strong>select Staged<\/strong>.<\/li>\n\n\n\n
- Go to Users > Settings<\/strong>.<\/li>\n\n\n\n
- Search for 黑料海角91入口 <\/strong>and click it.<\/li>\n\n\n\n
- When a user\u2019s status changes from either Leave <\/strong>or Inactive <\/strong>to Onboarding <\/strong>or Active <\/strong>and the reactivationAllowed<\/kbd> option is set to true, the user\u2019s state in 黑料海角91入口 will change from Suspended <\/strong>to Active<\/strong><\/li>\n\n\n\n
- When importing new users and updates for existing users, the statuses that are classified as inactive for this integration are: Leave <\/strong>and Inactive<\/strong>:\n
- Personio SSO connector<\/a> using a Custom OIDC application connector<\/li>\n<\/ol>\n<\/li>\n\n\n\n
- Personio IdM connector<\/a> using the Personio prebuilt application connector<\/li>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"){kind=icon}
<\/p><\/div>