---
title: "Okta SCIM Integration Guide for Scalefusion"
slug: "okta-scim-integration-guide-for-scalefusion"
updated: 2026-05-13T13:24:57Z
published: 2026-05-13T13:24:57Z
canonical: "help.scalefusion.com/okta-scim-integration-guide-for-scalefusion"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SCIM Integration Guide for Scalefusion

The [**SCIM**](https://simplecloud.info/) **(System for Cross-domain Identity Management)** integration with **Okta** allows organizations to automate the provisioning and management of users and groups in **Scalefusion**. With this integration, IT admins can easily synchronize user accounts, update user information, and manage group memberships directly from Okta ensuring that user access in Scalefusion stays up-to-date and aligned with your organization’s identity policies.

This guide walks you through the step-by-step process of configuring the SCIM connection between Okta and Scalefusion, along with details on supported features, setup requirements, and troubleshooting tips.

## Features

The following provisioning features are supported with this integration:

- **Push Users:** Users in Okta that are assigned to the Scalefusion OneIdP application are automatically added/imported to Scalefusion user management section.
- **Update User Attributes:** Changes to user attributes in Okta will flow through to Scalefusion.
- **Deactivate Users:** When users are deactivated in Okta, they will be deactivated in Scalefusion.
- **Push Groups:** Groups and their members from Okta can be synchronized to Scalefusion.

> [!NOTE]
> Scalefusion does not support the import feature, which allows Okta to pull users and groups from the Scalefusion application into Okta.

## Requirements

1. [SCIM Connector](/docs/introduction-4#configure-scim-connector-on-scalefusion-dashboard) should be configured on Scalefusion Dashboard.
2. You need an Okta admin account with permissions to add and configure applications.
3. Ensure your Scalefusion account has the necessary access to generate the SCIM API endpoint and token.

## How to Configure

## Set Up the SCIM Application in Okta

1. In the Okta Admin Console go to **Applications → Applications**.
2. Click **Browse App Catalog**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1759822147411.png)
3. Search for **Scalefusion OneIdP** and select **Scalefusion OneIdP**

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-B8EWGG7U.png)
4. Click **Add Integration**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-LJS5AR3T.png)
5. Under *General Settings*, enter an application label and InstanceUrl and click **Done**.

> [!NOTE]
> The **InstanceUrl** depends on the Scalefusion instance you are using. For example, if you are using the Global instance, the **InstanceUrl** should be `app.scalefusion.com`.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-QLNC3GLL.png)

**Configure API Integration**

1. Navigate to the **Provisioning** tab of the SCIM application.
2. Click **Integration**, then enable **API Integration**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-FMK18OS2.png)
3. From your Scalefusion Dashboard's SCIM configuration panel, copy the API Token. Paste the API token in the respective field into Okta as it is without modification.
4. Click **Test API Credentials** to verify the connection, then click **Save**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-ZZ1KRRSD.png)

## Configure Provisioning Actions

1. Go to **To App → Edit** in the Provisioning tab.
2. Enable the checkboxes:
  - Create Users
  - Update User Attributes
  - Deactivate Users
3. Click **Save**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-NSH75SLZ.png)

## Assign Users or Groups to the SCIM Application

### A. Assign Individual Users

1. Under the Assignments tab click **Assign → Assign to People**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1759829190972.png)
2. If needed, add a new person and fill the required details: User Type, First Name, Last Name, Username, Primary Email, optionally Secondary Email and Groups, Activation status.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1759832339804.png)
3. Click **Assign** next to the desired user.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-23BBZFIB.png)

### B. Assign Groups

##### Step 1: Create a Group

1. Go to **Directory → Groups → Add Group**.
2. Provide a Name and optional Description. Click **Save**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-FI2G20PR.png)

##### Step 2: Add Users to the Group

1. In the group’s details, click **Assign People**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-OHEZOLZ5.png)
2. If users aren’t yet present, click **More Actions → Add People** and complete the user details. Use the “+” icon to add each user to the group.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-WP37U0EO.png)

##### Step 3: Assign the SCIM App to the Group

1. In the SCIM application, go to **Assignments → Assign → Assign to Groups**.
2. Select the group you created and click **Assign**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-P7LJ6Z6P.png)

## Push Groups to Scalefusion

1. In the SCIM application in Okta, go to **Push Groups → Push Groups → Find groups by name**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-NRQO0V5E.png)
2. Search for the group you created, select it and click **Save**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-92Z6SUY0.png)

> **Note:** If you push groups without assigning them to the SCIM app, only the group names sync — **users will not** sync. To include both groups and their users, you must both assign the SCIM app to the group and push the group.

1. Once synced, in Scalefusion you will see:
  - Under *User Enrollment*: individually provisioned users
  - Under *User Groups*: groups and their associated users

> [!WARNING]
> **NOTE:**
> 
> 1. **Groups created within the Scalefusion OneIdP application cannot be linked with groups in Okta**
> 2. **For groups imported from external parties, we don't allow adding users from our console as we don't support sync to external parties and hence this operation is blocked.**

## Troubleshooting

If you encounter issues with provisioning (for example API test fails, or users/groups not syncing), ensure:

- The API Token and Base URL from Scalefusion were copied correctly into Okta.
- The SCIM Connector on the Scalefusion side is configured and active.
- Users or groups have been both assigned to the SCIM application **and** pushed from Okta.
- Okta provisioning logs do not show errors such as authorization failure or missing permissions.

## Okta Supported Attributes

The following default Okta user attributes are supported for SCIM Inbound synchronization:

- `userName`
- `givenName`
- `familyName`
- `displayName`
- `primaryPhone`
- `title`
- `nickName`
- `profileUrl`
- `preferredLanguage`
- `locale`
- `timezone`
- `userType`
- `middleName`
- `honorificPrefix`
- `honorificSuffix`
- `employeeNumber`
- `costCenter`
- `organization`
- `division`
- `department`
- `managerDisplayName`
- `type`
- `streetAddress`
- `locality`
- `region`
- `postalCode`
- `country`
- `formatted`

> **NOTE:**
> 
> **In addition to the default Okta attributes, custom attributes configured on the Okta side are also supported.**

If you have any questions or are having issues with SCIM Integration on other instances such as India or MEA, please leave us a message at [support@scalefusion.com](mailto:support@scalefusion.com)