In this guide, we’ll show you how to set up SCIM in Nulab Pass and Okta to allow for user provisioning.

Prerequisites

• User provisioning by SCIM (available with Nulab Pass).
• SAML configuration:
  • How to set up SAML authentication in Nulab Pass
  • SAML setup in Okta

Supported features

Nulab Pass supports the following provisioning features:

• Create users
• Update user attributes
• Deactivate users

How to set up SCIM

Configure the following settings in Okta and Nulab Pass.

Setup in Nulab Pass

1. Go to your organization settings.
2. Select Organization > User provisioning to open the SCIM configuration screen.

1. If user provisioning is not enabled:
   1. Select the “Manage” button. 
   2. Select the “Enable” checkbox.
   3. Select “Save.”.
   4. Record the SCIM URL somewhere safe.
2. If no token has been issued:
   1. Select the  “Generate token” link to issue a token.
   2. Record your SCIM token somewhere safe.

Setup in Okta

1. Go to your Okta admin console.
2. Select Applications > Applications in the left menu.
3. Select the “Browse App Catalog” button.

4. Search for and select “Nulab Pass.”

5. Select the “Add Integration” button.

6. Enter the application label and select ”Done.”

7. In the “Provisioning” tab, select Configure API Integration.” 

8. Complete the information.
   1. Select the Enable API integration” checkbox.
   2. Enter the issued token issued in the “API Token” field.
9. Select “Test API Credentials” to test the connection.
10. Select “Save” in the success message to save the connection.

11. Select  “To App” from the menu on the left and then “Edit” the “Provisioning to App” section.
12. Select and save the following checkboxes:
    1. Create users
    2. Update user attributes
    3. Deactivate users

13. Select the “Sign on” tab and then “Edit” in the “Settings” section.
14. Save the application by setting the application username format to email.

Operation with user provisioning

Create users

To add accounts to Nulab Pass with user provisioning:

1. Select the “Assignments” tab and assign users by going to Assign > Assign to People.
2. Enter and save the attributes.
   1. The information entered will become the Nulab Pass account information.
   2. The username will be stored in the Nulab Pass email. Okta's email is not synchronized.

Update user

To update Nulab Pass accounts with user provisioning:

1. Select the “Assignments” tab and then the pencil icon next to the account you want to update. 
2. Update and save the attributes.
   1. Changing the username will invalidate the synchronized Nulab Pass account and create a new account.

Deactivate users

To deactivate Nulab Pass accounts in user provisioning:

1. Select the “Assignments” tab and then the “x” next to the account you want to deactivate.
2. Select “OK” to confirm your decision. 

 

Delete users

Deleting an Okta user will disable but not delete the linked Managed Account. To delete the Managed Account linked to the deleted user, the account must be deleted manually in your Nulab organization settings.

Troubleshooting

Your SCIM is now complete. Check out Nulab Support for more details about creating Managed Accounts and using single sign-on.