SCIM Settings

Configure System for Cross-domain Identity Management (SCIM) settings that are available to all users.

Plan Availability:

What is SCIM?

System for Cross-domain Identity Management (SCIM), is an open standard to automate user provisioning. The SCIM specification is designed to more easily manage user identities in cloud-based applications, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models. SCIM settings provide additional profile settings available to all user accounts.

The SCIM specification is designed to more easily manage user identities in cloud-based applications. The specification suite seeks to build upon experience with existing schemas and deployments, placing specific emphasis on simplicity of development and integration, while applying existing authentication, authorization, and privacy models.

As a cloud-based technology, ProcessMaker developed SCIM so users' identities can be created either directly in a tool like Okta or imported from external systems like HR software or Active Directory. Since SCIM is a standard, user data is stored following a consistent protocol and can communicate across different apps.

ProcessMaker General SCIM Settings

Purpose of the SCIM Base URL

The SCIM base URL is set by default in ProcessMaker after the SCIM setting is enabled. Copy the SCIM base URL to the SCIM provider's settings to synchronize user identities via SCIM. The SCIM base URL is set for your ProcessMaker instance as a redirected URL that cannot be edited.

Obtaining a Bearer Token

In addition to the SCIM Base URL, a bearer token is also required to access ProcessMaker's SCIM endpoints. Follow the instructions for managing API tokens for users to obtain a bearer token for your user account and copy it to your SCIM provider's settings. This user account must also have the user permissions detailed in the Enable the SCIM Settings section.

Enable the SCIM Setting

Permissions

Your user account or group membership must have the "Settings: View Settings" permission to enable SCIM settings unless your user account has the Make this user a Super Admin setting selected.

If your user account does not have the Make this user a Super Admin option selected, the following additional permissions are required to successfully access ProcessMaker's SCIM endpoints:

• Users category: Create Users, Delete Users, Edit Users, View Users.

• Groups category: Create Groups, Delete Groups, Edit Groups, View Groups.

See user permissions/group permissions or ask your Administrator for assistance.

Follow these steps to enable the SCIM setting:

1. Ensure that you are logged on to ProcessMaker Platform.

2. Click the Admin option from the top menu. The Users page displays.

3. Click the Settings icon from the left sidebar to view all settings.
4. From the Settings panel on the left, expand the Log-in & Auth section.

5. Select SCIM to view the following details:

   • Setting: The Setting column displays the SCIM Setting name.

   • Configuration: The Configuration column displays the setting value and how it is configured.

   

   SCIM base URL in the "SCIM" tab within the "Settings" page
6. Enable the SCIM toggle key in the Configuration column. The SCIM base URL displays beside the SCIM Base URL setting to copy into clipboard for inclusion into your SCIM provider's settings. The SCIM base URL is set for your ProcessMaker Platform instance as a redirected URL that cannot be edited.

7. Obtain a bearer token for your user account and copy it into your SCIM provider's settings.

Copy the SCIM Base URL

Click the Copy to Clipboard icon to copy the URL for inclusion into your SCIM provider's settings.

Both the Edit icon and the Delete icon are deactivated in SCIM. The SCIM base URL is set for your ProcessMaker Platform instance as a redirected URL that cannot be edited.