Okta SCIM adds additional functionality to the Okta manual SAML configuration, allowing you to sync your users from Okta into Deskpro without them logging in.

In Deskpro

Go to Admin > Apps & Integrations > SCIM Tokens, and generate a new token by clicking the + New button in the top right.

Click into the token and make a note of the Token and SCIM Endpoint values.

In Okta

Navigate to your previous SAML application in Applications > Applications

Click the General tab then in the App Settings section, click the Edit button in the top right.

Check the Enable SCIM provisioning field then click Save. This will add a new Provisioning tab along the top.

Click Provisioning, then in the SCIM Connection section, click the Edit button in the top right.

Enter the following values in the form:

• SCIM connector base URL - Enter the SCIM Endpoint from the Deskpro SCIM Tokens page.

• Unique identifier field for users - Enter userName.

• Supported provisioning actions - Check the following fields:

  • Import New Users and Profile Updates

  • Push New Users

  • Push Profile Updates

• Authentication Mode - Change to HTTP Header

• HTTP Header - Paste the Token from the Deskpro SCIM Tokens page into the Token field

Test the connector configuration to confirm it can connect, then click Save to apply.

This will automatically provision new users assigned to the application in Okta. If you want to import your existing assigned users, click on Assignments, then click the Provision button at the top of the user table.