• Home
• App Integrations
• Provisioning Integrations
• Provisioning with Onelogin

Provisioning with OneLogin

---

Provisioning with Onelogin saves time when setting up new users and teams, and helps you manage access privileges through the user lifecycle. miniOrange can create, read, and update user accounts for new or existing users, remove accounts for deactivated users, and synchronize attributes across multiple user stores via Onelogin.
Follow the steps given below to configure provisioning with miniOrange.

Follow the step-by-step guide given below for Onelogin

Prerequisites

• To implement SCIM for your app, add User Schema in Onelogin following this documentation.

1. Configure SCIM Client in miniOrange

• Login to miniOrange dashboard.
• Go to Apps section



• Go to Apps > Add Application button.



• Select Provisioning >> SCIM Client (source).



• Add the Custom Application Name
• Copy the Scim Base URL and Bearer Token and save it for further configuration.



• Configure the attributes mappings and toggle on/off Enable Provisioning Features based on your requirements.



• SCIM base URL and Bearer Token can also be retrieved later by editing the app.
• If the provisioning feature “Delete the Deactivated users” is enabled then the unassigned/deleted users in source will be deprovisioned otherwise they will be disabled.
• Save the app.

2. Configure provisioning in Onelogin

Create your SCIM Test App

• Access OneLogin and go to Apps > Add Apps.
• Search for and select SCIM Provisioner with SAML (Core Schema) or SCIM Provisioner with SAML (Enterprise Schema), depending on your schema needs.
• Give your SCIM test app a Display Name value that will help you recognize it.
• Select Save




Configure your SCIM Test App

• Select the Configuration tab.
• Provide your SCIM Base URL value which you copied in Step 1. This is the address that points OneLogin to your SCIM API server.
• Provide your SCIM JSON Template value. If you leave this field blank, Onelogin will use the OneLogin Core User Schema or OneLogin Enterprise User Schema, depending on the SCIM Provisioner with SAML app you added.
• Provide your SCIM Bearer Token value. This token authenticates requests and responses sent between the OneLogin SCIM provisioning service and miniOrange SCIM server.
• Select Save.

3. Test Connection

• Access the Configuration tab for your SCIM test app.
• Select Enable. The app will attempt to make an initial connection to the SCIM base URL defined for your SCIM app.

Note: This initial connection does not invoke any actual provisioning and just makes a GET request for a user value that OneLogin knows does not exist. If the request receives a 404 status code as a response, it confirms that the endpoint is valid and the API Status displays as Enabled.

View Provisioning Reports

Troubleshooting

External References

• User Lifecycle Management
• What is Provisioning? and how does it work?