How to setup scim with okta

For example, in Okta, once you create an account, you can click on Applications on the sidebar menu:

Note you will have to fill in the appropriate fields for the SAML or OIDC setup to continue.

• SAML Setup
• OIDC Setup

Once the application is created, under General -> App Settings, click “Edit” and then the checkbox “Enable SCIM provisioning”.

Next, go to your instance of Cal.com and navigate to https://app.cal.com/settings/organization/dsync and click configure.

In the “Configure Directory Sync” form, choose a directory sync name and select “Okta SCIM v2.0” as the “Directory Provider”.

In Okta, go to your application. Navigate to the “Provisioning” tab and click “Integration” under “Settings”.

• Under “SCIM connector base URL” enter the “SCIM Base URL” from Cal.com
• Under “Unique identifier field for users” enter “email”
• Under “Supported provisioning actions” enable:
  • “Import New Users and Profile Updates”
  • “Push New Users”
  • “Push Profile Updates”
  • “Push Groups”
• Under “Authentication Mode” choose “HTTP Header”
• Under “Authentication” enter the “SCIM Bearer Token” from Cal.com
• When you hit save, it will make a test call to the “SCIM Base URL”

After saving, navigate to the “To App” settings, still under the “Provisioning” tab.

Under “Provisioning to App”, click “Edit” and enable:

• “Create User”
• “Update User Attributes”
• “Deactivate User”

Under “{Your application name} Attribute Mapping,” remove all fields except for:

• “username”
• “givenName”
• “familyName”
• “email”
• “displayName”

Set each of these properties to “Map from Okta Profile” and the related field. Under “Apply On” select “Create and Update”.

You can now assign users and groups to the app.