Connect Administration: OKTA Provisioning

Connect allows you to create, remove, and manage your users through OKTA. Make sure that you have completed the previous steps outlined in the SSO and Directory Service - Start Here! document beforehand

NOTE: A Connect or Connect with Insights Subscription is required

NOTE: Provisioning requires the Lifecycle Management (LCM) add-on to be present in your OKTA subscription

NOTE: These instructions presuppose that you have the following groups setup in OKTA for the Connect application. If you do not please prepare these first:

• A group containing all Connect Users
• Specific Team or Project Groups

Setup Provisioning in OKTA

1. Login to OKTA Admin
2. Navigate to Applications>Applications
3. Select "Browse App Catalog"
4. Search and select "SCIM 2.0 Test App (OAuth Bearer Token)"
5. Click "Add Integration"
6. Set the Application Label to "Connect Provisioning" and select Done
   
7. Once created, navigate to "Provisioning" at the top
   
8. Click "Configure API Integration"
9. Check the box labeled "Enable API Integration"
10. In a separate tab or window, navigate to connect.extensis.com
11. In Administration>Directory Service select the "Provisioning Configuration" Tab
    
12. Return to the provisioning page in OKTA and copy the Tenant URL into the SCIM 2.0 Base Url and the Secret Token into the OAuth Bearer Token
    
13. Select "Test API Credentials"
14. If the test is successful, save the configuration
15. This will open the "To App" Settings Tab, click Edit
16. Enable the following:
    Create User
    Update User Attributes
    Deactivate Users
    
17. Under "Connect Provisioning Attribute Mappings" remove everything except:
    user.firstName
    user.lastName
    user.email
    (user.email != null && user.email != '') ? 'work' : ''
    
18. Save these changes
19. Navigate to the "Assignments" tab
    
20. Select "Add user/group"
21. Click on Assign>Assign to Groups
22. Select the group you built containing all your Connect Users (see Note at the top)
23. Click "Save and Go Back"
24. Navigate to the "Push Groups" Tab
    
25. Select +Push Groups>Find groups by name and search for your group(s) containing your specific teams or projects (see Note at the top). You can either click "Save" or "Save & Add Another"
26. When the group is being pushed out to Connect you will see a "Pushing" status next to the group:
     
    then an "Active" status when it was successful:
    

Next: Configure Teams in Connect