SCIM provisioning

Configure SCIM provisioning with Okta

Before setting up SCIM provisioning, you’ll need to configure single sign-on using Okta. Additionally, you’ll need to generate a personal access token via the Abstract SDK, as well as a SCIM login JSON file.

Step 1: Configure API Integration in Okta.

Configure API Integration in Okta
  1. In Okta, go to the Settings page, and select API Integration.
  2. Click Configure API Integration.
  3. Check the box next to Enable API Integration.
  4. Enter the credentials you retrieved when generating a personal access token.
    Note: These credentials are different than what you use to log in to Abstract. 
  5. Click Test API Credentials.
  6. Click Save.

Step 2: Configure “Provisioning To App” Settings in Okta.

Configure “Provisioning To App” Settings in Okta
  1. In Okta, go to the Settings page, and select To App.
  2. Select which features you wish to enable:
    • Create Users
    • Update User Attributes
    • Deactivate Users
  3. Click Save.

Step 3: Assign the users you wish to provision.

On Assignments tab, click Assign button to start provisioning users.
  1. In Okta, go to the Assignments page. 
  2. Click Assign.
  3. Choose the users you wish to provision.

How to generate a personal access token

In order to set up SCIM provisioning, you’ll need to generate a personal access token.

To generate a personal access token:

  1. Login to Abstract’s web app with your Admin credentials.
  2. Visit Abstract’s Tokens page.
  3. Select Create API Token and follow the prompts.
  4. Next, open the Abstract web app to locate your Organization ID.
    Note: From the Abstract homepage, you can find your Org ID in the URL, e.g. https://app.abstract.com/organizations/<org_id>/projects.
  5. Open a shell to run this curl command:
curl https://api.goabstract.com/organizations/<org_id>/generate_scim_login -H "Authorization: Bearer <personal_access_token>"

The returned JSON will include your username and password.