Jira Using SCIM User and Group Provisioning for Okta
User Sync & Group Sync app provisions user and group information from Okta to Jira, Confluence and Bitbucket. Users,
groups and directory details can by provisioned using SCIM. SCIM provisioning works based on events performed on
IDP. This way the administrator only needs to manage user accounts in Okta.
This reduces the administration time required to create users and groups in Atlassian modules such as Jira,
Confluence and Bitbucket.
You can refer the steps to configure Okta method with the Jira SCIM from the video or documentation given
below
Download And Installation
Log into your atlassian instance as admin.
Navigate to the settings menu and Click Manage Apps.
Click Find new apps or Find new add-ons from the left-hand side of the page.
Locate miniOrange User and Group Sync app.
Click Try free to begin a new trial or Buy now to purchase a license.
Enter your information and click Generate license when redirected to MyAtlassian.
Click Apply license.
Step 1: Get SCIM
Client Details
In the Configuration tab, please select OKTA provider.
In the popup, please select SCIM method to perform user and group synchronization.
In SCIM configuration, Please enter App Name and click on Save Settings button. Copy the
SCIM Base URL and SCIM Bearer Token, these will be used later to configure SCIM application on
OKTA. Additionally, you can choose from SCIM 1.1 or SCIM 2.0.
Step 2: Setup Okta SCIM
Configurations
Login to your Okta organisation as a user with administrator privileges.
Navigate to Admin Portal > Applications. Click on Browse App Catalog.
Now search for the SCIM. Add the SCIM 2.0 Test App (Bearer Token)
application. If you had selected SCIM 1.1 earlier, then you would need to select SCIM 1.1 Test App(Bearer Token).
Click on the Add Integration button.
Once the app is created, go to the Provisioning menu of the application and Click on the Configure
API Integration button.
Now click on the Enable API Integration and enter the SCIM Base URL(as SCIM connector base
URL) and SCIM Bearer Token(as Authorization) from the SCIM Configuration tab
of the plugin.
Click on Test API Credentials. If the connection is established, it will show a success message.
Click on the Save button. After that Click on To App under the Settings option on the
left side.
Click on Edit button and check the Create Users, Update User Attributes and
Deactivate Users checkbox and click on the Save button.
Then go to Assignments menu and add Users that you want to provision into your application. You can
also assign groups. Members of the assigned groups will be provisioned to Atlassian module.
Step 3: User Sync Settings
Select the User Sync Settings tab from the left sidebar. Here you can configure different
settings about
user creation and updation.
You can select the directory, enable or disable user import, update process.
The user can be automatically enabled or disabled here based on IDP configuration.
You also have an option to set Default Project Lead and Default Component
Lead.
Step 4: Group Sync
Settings
Select the Group Sync Settings tab from the left sidebar. Here you can configure different
settings about
group creation and group mapping.
Here you can configure Default groups for new and all users.
You can set Manual Group Mapping or On-The Fly Group Mapping.
1. Manual Group Mapping -
Here you can manually map Jira groups with the groups from IDP.
You can also configure to import IDP groups, filter groups and whether to keep existing users or not.
2. On-The Fly Group Mapping -
Here users will be assigned to groups in Jira whose group name is the same as groups from IDP. If the
group doesn't exist in Jira then it will be created.
You can configure to keep the existing user groups, filter groups and apply regular expressions on the
groups.
