SSO SCIM Onboarding

Purpose

SCIM 2.0 provisioning onboarding for SailPoint Entro.

Complete the following:

1. Decide provisioning mode

   Choose one of the provisioning modes:

   • JIT (default)

   • SCIM-only

   • Hybrid

2. Select provider in SailPoint Entro SCIM wizard

   In the SailPoint Entro SCIM wizard select your provider or choose "General".

3. Obtain SCIM base URL

   SailPoint Entro provides the SCIM base URL in the wizard. If you have a custom domain configured, the URL will use your custom domain.

4. Generate SCIM access key

   Generate the SCIM access key in the wizard.

5. Configure IdP with SCIM details

   Paste the SailPoint Entro SCIM base URL and the generated access key into your IdP's SCIM configuration.

6. Map user attributes

   Map the following attributes between your IdP and SailPoint Entro:

   • userName to email

   • displayName to givenName + familyName

   • groups to group membership

7. Configure provisioning actions

   Configure the provisioning actions you want to enable:

   • create

   • update

   • deactivate

8. Test provisioning

   Run a test push for a test user and confirm the user appears in SailPoint Entro.

What to Send to SailPoint Entro

• Confirmation of provisioning mode

• Attribute mapping

• Test user and timestamp