Generic SCIM 2.0 client

Steps verified in the identity provider's admin console.

The identity provider can provision users and groups with SCIM 2.0.

SCIM 2.0

Connect any SCIM 2.0 client

1. In KeenAuth create a directory and copy the SCIM base URL SCIM base URL and the bearer token SCIM token (shown once).
2. In your identity provider's SCIM settings enter the base URL and the bearer token; do not use Basic authentication.
3. Map userName, externalId, name, emails and active; the password attribute is rejected by KeenAuth.
4. Run the provider's connection test, assign users or groups, and verify the provisioning log in KeenAuth.

Values in bold are shown on the connection's page in the Admin Portal, where this guide has them filled in.