The Okta/Declaree Provisioning integration currently supports the following features:
- Create Users
- Update User Attributes
- Deactivate Users
- Import Users
- Sync Password
- Group push
In order to configure Okta Provisioning with Declaree, you're encouraged to add a separate user account with administrative privileges. If you have more than one organization, please add this account to the organization which should be the default for users who are provisioned through this integration.
In order to sync groups, make sure the group name should be unique, otherwise the groups won't be linked
Step-by-Step Configuration Instructions
You’ll begin by enabling API Integration:
- Check the Enable API Integration box.
- For username and password, enter the credentials that belong to the (new) user account used provisioning.
Test the API credentials before saving. When the test confirms a succesful connection, save the settings.
After setting up the API Integration, you will need to enable all options in the 'To App' page. The checkboxes for 'Create Users', 'Update User Attributes', 'Deactivate Users' and 'Sync Password' should all be checked. You are free to set your own password sync options, but our recommendation is to use the 'Sync a randomly generated password' option and to 'Generate a new random password whenever the user's Okta password changes'
Your settings should look like the following screenshot:
The 'To Okta' page should be set to never import users from Declaree, when all user management occurs from the Okta system. Otherwise, specify the schedule to have identities synchronised between Declaree and Okta.
When all settings are saved, you can use the 'Assignments' tab to add users to Declaree.
Troubleshooting and Tips
To prevent users from seeing their Okta username where Declaree displays the users email address, please set the 'Application username format' to 'Email' in the Sign On tab.
If your API Credentials Test fails, please check your credentials by doing a normal web login using the provisioning account credentials. If this fails, please reset the password. In any case, feel free to contact support if you have any questions.
* This integration with Okta is only available to accounts that have the SCIM module enabled. See pricing and plans or contact us to learn more. *