Skip to content
Joan Help

Provisioning users from Okta with SCIM

Joan uses a System for Cross-Domain Identity Management (SCIM) to enable automatic provisioning of users from Okta. When enabled, all user management will be done only in Okta and disabled on Joan's side.

1. Enable SCIM integration in MyJoan

Navigate to user directory and click on SCIM Integration. When a new window opens, enable the integration and generate a new token. That token will be used to authenticate the connection between Okta and Joan.

MyJoan Integrations > SCIM with SCIM Provisioning switched on and the Generate new token button

2. Add the "SCIM 2.0 Test App (OAuth Bearer Token)" application to your Okta account

Okta app catalogue search with the SCIM 2.0 Test App (OAuth Bearer Token) highlighted

3. Open the new app to edit the application settings

Okta Applications list with the SCIM 2.0 Test App (OAuth Bearer Token) highlighted

4. Set the General settings

Okta SCIM app General tab with the App SettingsOkta SCIM app General tab with the App Embed Link and access error page settings

5. Configure the sign-on settings

Okta SCIM app Sign On tab with the sign-on settings highlighted

6. Set the provisioning and the user account mapping

Okta SCIM app Provisioning > To App with Create Users, Update User Attributes and Deactivate Users enabledOkta SCIM app Attribute Mappings including userType

7. Connect Okta to Joan

Please set the endpoint to https://portal.getjoan.com/api/scim/v2 and add the token you generated in step 1

Okta SCIM app Provisioning > Integration with the SCIM 2.0 Base URL and OAuth Bearer Token

Test the API Credentials to ensure the connection has been successfully established between your organization and Joan.

If the test was successful, then the only thing left is to assign user accounts or groups to the application and that is it.

*If you encounter any issues, please contact support@getjoan.com.

Was this helpful?