SCIM: Configuring Okta to Allow Provisioning for InVision V6
  • 30 Jan 2023
  • 2 Minutes to read
  • Dark
    Light

SCIM: Configuring Okta to Allow Provisioning for InVision V6

  • Dark
    Light

Article Summary

This article provides information on an open beta feature for InVision V6 Enterprise teams.
InVision V6 now offers support for SCIM provisioning via Okta, OneLogin, and Azure. If you haven't implemented SCIM provisioning for your Enterprise, please reach out to your Customer Success Manager to get rolling while the feature is in open beta.

InVision V6 Enterprise teams can configure Okta to enable System for Cross-domain Identity Management (SCIM) provisioning for their InVision members. Before you start, however, an owner or admin on the Enterprise team will need to set up SAML for your InVision V6 team as well as enable SCIM provisioning in InVision V6.

Configuring Okta to allow SCIM provisioning

To configure Okta to allow SCIM provisioning for your InVision Enterprise members:

  1. Sign in to Okta, click the Admin button, click Applications in the main navigation, and select your InVisionapp from the list.
    This should be the same app you configured for SSO for your InVision Enterprise team.
  2. Click the Sign On tab and, under Credentials Details, ensure that the Application username format dropdown is set to Email.
    invision-okta-scim-provisioning-username-format.png
  3. On the Provisioning tab, click Configure API Integration, and then click the Enable API integration checkbox.

    invision-okta-scim-provisioning-configure-api-integration.png
    invision-okta-scim-provisioning-enable-api-integration.png
  4. In the Base URL field, enter the SCIM API URL (https://your—team—name.invisionapp.com) you saved in step 5 of the SCIM provisioning in InVision V6 instructions.

    invision-okta-scim-provisioning-base-url.png
  5. In the API Token field, paste the authentication token you copied in step 6 of the SCIM provisioning in InVision V6 instructions.
    invision-okta-scim-provisioning-api-token.png
  6. Click Test API Credentials.
    invision-okta-scim-provisioning-test-api-credentials.png
    Note: If the test is successful, you will see a verification message just above the Enable API integration checkbox.
  7. Click Save.
    invision-okta-scim-provisioning-save.png
  8. In the left panel, click the To App tab. Next to Provisioning Features, click Edit. Next to Create Users and Deactivate Users, select each Enable checkbox, and then click Save.

    invision-okta-scim-provisioning-edit-features.gif

You can now assign people to the app (if needed) and finish setting up the InVision application in Okta.

WarningEditing a user's email address and/or name in your IdP app will not update that user's profile in InVision V6.

Importing InVision members to Okta

After using the Okta app to configure your Enterprise for SCIM provisioning in Okta, you can import the members of your Enterprise from InVision to Okta.

WarningIf you've already assigned users to the InVision app in Okta, importing your members from InVision may then require repeating the assignment step for any members who were already accounted for in Okta.

Import members

To import your InVision members to Okta:

  1. Sign in to Okta, click the Admin button, click Applications in the main navigation, and click the InVision link.
  2. Click the Import tab.
  3. Under Import Results, click Import Now.
    Note: Depending on the size of your organization, the import process may take a few minutes.
  4. In the upper-right corner of the imported user list, select the checkbox for all users, click Confirm Assignments, and then click Confirm.
    Note: To confirm assignments for one user at a time, click the checkbox next to the user's name instead.
    invision-cloud-v7-scim-provisioning-import-members-to-okta.gif

Activate imported members

To activate members you have imported:

  1. In the main Okta navigation, click Dashboard.
  2. Under Status, click [Number] people need their account activated.
  3. Under Activate People, click Activate All.
  4. Click Activate.
    invision-cloud-v7-scim-provisioning-activate-imported-members.gif

Learning more about SCIM provisioning for InVision V6

To learn more about SCIM provisioning for InVision V6, see these related articles:


Was this article helpful?