Okta
Last updated
Last updated
This guide assumes that you have already enabled SCIM on the Datasaur app and wish to use Okta as the Identity Provider for both SAML and SCIM integration.
Let's begin by enabling SCIM provisioning on your existing app, which has already been successfully integrated with SAML.
Open your existing app and navigate to Settings. The default tab should be General.
Check the "Enable SCIM provisioning" option.
Save the changes.
After successfully enabling the SCIM provisioning above, navigate to the Provisioning tab. There will be multiple settings section on the sidebar which consist of: To App, To Okta, and Integration.
Fill the SCIM Connector Base URL: https://<datasaur-app-base-url>/api/teams/<your-team-id>/scim/v2.
Replace <datasaur-app-base-url> and <your-team-id> accordingly.
For SaaS Datasaur-hosted, you can use app.datasaur.ai as the <datasaur-app-base>. If you're self-hosted, adjust accordingly based on your domain.
To get the team ID, it can easily be fetched from your URL. For example, if you are currently on https://app.datasaur.ai/teams/1/projects, your team ID is 1.
Fill the Unique Identifier Field for Users: email.
For the Supported Provisioning Actions, check the following options:
Import New Users and Profile Updates
Push New Users
Push Profile Updates
Push Groups
For the Authentication Mode, select HTTP Header.
Click on the Save button.
Navigate to another setting called To App on the left, then enable the following options:
Create Users
Update User Attributes
Deactivate Users
There are two ways to provision users to Datasaur: assigning people or assigning groups.
You can directly assign a person to the Datasaur app. They will automatically be added to the Workspace, with the default role of Labeler since no role mapping is configured for individuals.
Go to your app on Okta.
Navigate to the Assignments tab.
Click Assign > Assign to People. Continue selecting the desired users to be added to your Workspace. Then, click Done to finish the assignment.
Wait for a few mins and the users should be added to the Workspace as Labeler.
You can assign multiple people at once that are under a group. All users in a group will be added and assigned by the role mapping that is defined on the Datasaur app. Every change to the group will automatically be synchronized due to the Push Groups functionality.
Ensure the role mapping is properly configured on the Datasaur app.
If you don't configure the Groups just yet, navigate to the Groups under Directory on the sidebar of your Okta dashboard. Create all the groups that you needed and make sure you name each group the same as the name defined in the role mapping.
Go to your app on Okta.
Navigate to the Assignments tab.
Click Assign > Assign to Groups. Select the desired groups to be added to your Workspace. Then, click Done to finish the assignment.
Navigate to the Push Groups tab.
Click the Push Groups button, find a group, and then click Save or Save & Add Another. Reiterate this process until all the groups from step 5 are added.
Wait for a few mins and the users from all the groups should have been added to the Workspace with the appropriate role.
Fill the Authorization under HTTP Header section with the API key that you from the Datasaur app.
