SCIM with Okta

Learn how to configure Couchdrop to sync with Okta

Overview

Couchdrop supports SCIM provisioning with Okta to keep users and groups synchronized between Okta and Couchdrop.

You can use Okta to provision and update Couchdrop users and groups, deactivate them when required, and optionally import existing Couchdrop users and groups into Okta.

How provisioning works

Okta can provision users and groups into Couchdrop through the Couchdrop SCIM application.

Depending on the options you enable, Okta can:

• Create Couchdrop users

• Update existing users

• Deactivate users

• Push groups and group memberships

• Import existing Couchdrop users and groups back into Okta

This lets Okta act as the central identity management system while Couchdrop reflects the users and groups assigned through the SCIM integration.

If you plan to import existing Couchdrop users or groups into Okta, you can configure this after the SCIM connection has been established.

Configure SCIM provisioning

Before you start

To configure SCIM provisioning between Couchdrop and Okta, you will need:

• Access to Couchdrop with permission to create a User Provisioning Token

• Administrator access to your Okta tenant

• The Couchdrop SCIM application from the Okta Application Catalog

• The users and groups you want to assign to the Couchdrop application in Okta

1

Create a User Provisioning Token in Couchdrop

In Couchdrop, navigate to User Provisioning and create a new Provisioning Token.

Copy the token. You will use it when configuring the Couchdrop SCIM application in Okta.

2

Add the Couchdrop SCIM application in Okta

In Okta, navigate to Applications > Applications, then select Browse App Catalog.

Search for Couchdrop SCIM and select the application.

Select Add Integration, then select Done.

3

Assign users and groups

Assign the users and groups that you want to provision between Okta and Couchdrop to the Couchdrop SCIM application.

4

Configure the API integration

Open the Provisioning tab and select Configure API Integration.

Enable API Integration, then enter the Provisioning Token created in Couchdrop into the API Token field.

Select Test API Credentials to verify the connection.

If the test succeeds, select Save.

5

Enable user provisioning

From the Provisioning settings, select Edit and enable:

• Create Users

• Update User Attributes

• Deactivate Users

These settings allow Okta to create, update, and deactivate corresponding users in Couchdrop.

6

Configure group provisioning

To push groups and group memberships from Okta to Couchdrop, use the Push Groups option in the Couchdrop SCIM application.

Configure the Okta groups that should be pushed to Couchdrop.

7

Configure imports from Couchdrop to Okta

If you want to import existing Couchdrop users and groups into Okta, open the Provisioning tab and select To Okta.

Configure the required scheduled import frequency and matching rules.

Then open the Import tab and select Import Now.

Okta will display the users and groups available for import. Select the users and groups you want to add to Okta, then select Confirm Assignments.

Supported features

Feature	Description
Push Users	Users created in Okta are also created in Couchdrop.
Push User Updates	User updates in Okta are pushed to the corresponding Couchdrop users.
User Deactivation	Users deactivated in Okta are deactivated in Couchdrop.
Push Groups	Groups created in Okta are also created in Couchdrop.
Push Group Updates	Group updates in Okta are pushed to Couchdrop.
Group Deactivation	Groups deactivated in Okta are deactivated in Couchdrop.
Import Users	Users created in Couchdrop can be imported into Okta.
Import Groups	Groups created in Couchdrop can be imported into Okta.