Prerequisites

• Before enabling SCIM provisioning, ensure that Single Sign-On (SSO) is already configured. If you have not set up SSO yet, refer to the SSO Setup Guide for detailed instructions.

---

Setup

Clazar Dashboard

• Go to Settings > Security > SSO in your Clazar dashboard

• Select the default roles that will automatically be assigned to newly provisioned users.

• Enable SCIM User Provisioning.

  

• After enabling SCIM, you will see the SCIM API endpoint and an option to Generate API Key.

• Copy the SCIM API endpoint and API key—you will need these in the next step.

Okta Setup

Step 1

• Open the Clazar app you created as part of the SSO setup in your Okta dashboard.
• In the General tab, enable SCIM Provisioning and then click Save.
• The Provisioning tab should now be visible.

Step 2

• In the Provisioning Tab
  • Paste the SCIM API endpoint you copied from the Clazar dashboard.
  • Set the Unique Identifier Field for users to userName.
  • Select the recommended provisioning actions (see the screenshot below for which options to enable).
  • Change the Authentication Mode to HTTP Header, and then paste the API key you copied from the Clazar dashboard.
  • Click Test Connector Configuration to verify the connection.
  • Click Save.

Step 3

• In the Provisioning tab, the To App settings option is now visible.
• Enable the following Provisioning to App options:
  • Create Users
  • Update User Attributes
  • Deactivate Users
• Save your changes.

Final Step

In the Assignments tab

• If any users were already assigned to this application in Okta, you might see a red icon next to them in the Assignments tab.
• Click Provision User to sync those users with Clazar.