SCIM Provisioning

System for Cross-domain Identity Management (SCIM) is a standard for exchanging user information across applications. Popl supports SCIM for managing members on a Popl Team, and will support any vendor that supports SCIM standard schemes. SCIM can be used to provision Popl profiles for your team.

To get started with SCIM provisioning, please request your Tenant URL and Token from our support team: [email protected].

SCIM with Okta

1. Configure Popl with SAML in Okta: Here

2. Open the Popl Application in Okta. Switch to the General tab and edit the settings

3. On the general settings pane, turn on SCIM provisioning. Save these changes.

1. Next, switch to the Provisioning tab in Okta. Set the following options:

   1. SCIM connector base URL: https://api.popl.co/api/external/scim/

   2. Unique identifier field for users: userName

   3. Supported provisioning actions: Check the following options:

      1. Push New Users

      2. Push Profile Updates

      3. Push Groups

   4. Authentication Mode: HTTP Header

   5. Authorization: Enter the token provided to you by Popl support. If you do not have a token, please reach out to us [email protected]

1. Click "Test Connector Configuration". Save these changes.

2. Switch to the "To App" option in the sidebar on the left. Ensure these options are selected. Save any changes.

1. Click on the "Assignments" tab on the top. Add the users or groups that you would like to have synchronized to Popl.

2. You should now see that those profiles are available in your Popl team!

SCIM with Microsoft Entra

1. Log in to Microsoft Entra (https://entra.microsoft.com/#home)

2. On the left sidebar, under “Applications”, click “Enterprise Applications”

3. Click “New Application”

4. Click “Create your own application”

5. Name your SCIM application and select “Integrate any other application you don't find in the gallery (Non-gallery)”

6. Select “Provisioning” under Manage

7. Change “Provisioning Mode” to Automatic where you will be asked for the acquired Tenant URL and Secret Token.

8. Within Admin Credentials, enter in the Tenant URL and Secret Token.

9. Mappings

   1. At the moment only name and email are supported for Users.

   2. Groups are not support at the moment so please select no for enabled.

   3. Test Connection where you will be shown a success message.

   4. Set “Provisioning Status” to On and click save.