See Stacksync in action with a solution architect. Book a demo ↗
StacksyncDocs
StacksyncCommunityBook a demoContact Support
What is Stacksync?FeaturesSecuritySCIM

OKTA

SCIM for OKTA

The Stacksync OKTA app is currently under review by OKTA. Until the app is published on OKTA marketplace, here is a guide to synchronize your OKTA users automatically into Stacksync by creating the SCIM app yourself

This setup takes ~10min

Notes:

  • This setup needs to be implemented by an OKTA ADMIN
  • The SCIM integration is associated to a unique Stacksync workspace. If you have multiple workspaces (such as dev, stage and prod) you will need to set up an SCIM app for each of these Stacksync workspaces. Each workspace has independent RBAC enforcement.

Setup manual

  1. On your OKTA homepage go on the admin section

    Okta My Apps homepage with the "Admin" button highlighted in the top right.

  2. Once you are on the admin page, go to Applications and click on Create App Integration

    Okta admin Applications page with the "Browse App Catalog" button highlighted next to "Create App Integration".

  3. Browse for SCIM 2.0 App with Header Authentication

    Okta App Integration Catalog search for "scim" with "SCIM 2.0 Test App (Header Auth)" highlighted.

  4. Add the application

    Okta "Add SCIM 2.0 Test App (Header Auth)" General Settings with Application label set to "SCIM 2.0 Stacksync" and a Next button.

  5. In the provisioning section click on Configure API Integration

    Okta SCIM 2.0 Stacksync app Provisioning tab showing "Provisioning is not enabled" with the "Configure API Integration" button highlighted.

  6. Go to the Workspace Settings page at https://app.stacksync.com to find the informations necessary for the next steps.

    1. Find your workspace_id on the top of the page
    Stacksync workspace Settings page with the Workspace Id (2610) highlighted under Workspace Details.

    1. Generate a workspace_api_key at the bottom of the page.

      Bottom of Stacksync Settings with the Workspace API Key section highlighted, showing a key name field and "Generate new API key" button.

  7. Set up the API integrations using your Stacksync credentials:

    1. Base URL: https://api.stacksync.com /v1/workspace/<your_workspace_id>/scim/v2/

    2. API Token: Bearer <your_workspace_api_key>

      Okta Provisioning integration with Base URL https://api.stacksync.com/v1/workspace/..., API Token and Import Groups highlighted.

  8. Now that you are connected to the Stacksync SCIM server, you can create a Group for the users that will have the role editor in Stacksync and then provision that group to the app you just created.
    Note that there are 2 roles you can set for you group: viewer or editor.

    Okta "Stacksync Editors" group Applications tab with the "Assign applications" button highlighted.
    Okta "Assign Applications to Stacksync Editors" dialog with the roles attribute set to "editor" highlighted.

  9. Now you can assign users to this group

    Okta "Stacksync Editors" group People tab with the "Assign people" button highlighted.

Congrats' you just automatically provisioned users to the Stacksync app!

On this page

Setup manual