---
title: "OneLogin SCIM Integration Guide for Scalefusion"
slug: "scim-integration-with-onelogin"
updated: 2025-10-16T12:08:16Z
published: 2025-10-16T12:08:16Z
canonical: "help.scalefusion.com/scim-integration-with-onelogin"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# OneLogin SCIM Integration Guide for Scalefusion

This guide walks you through setting up the SCIM integration with Scalefusion and provisioning users and groups via OneLogin.

## Pre-requisite

1. [SCIM Connector](/docs/introduction-4#configure-scim-connector-on-scalefusion-dashboard) should be configured on Scalefusion Dashboard.

## Step 1: Set Up the SCIM Application in OneLogin portal

1. Log in to your OneLogin portal, navigate to **Applications**, and click **Add App**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-NJNCMPB5.png)
2. Search for **SCIM Provisioner with SAML (SCIM v2 Enterprise)** and select it.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-XEX3WBZ8.png)
3. Enter a name and click **Save**.
4. Once you save, you will see more sections to add data from the Scalefusion dashboard.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-INEWU9D0.png)
5. Go to the **Configuration** tab, scroll down to **API Connection**, and enter the following details:
  1. **SCIM Base URL:** Copy the **SCIM API Endpoint URL** from the Scalefusion dashboard and paste it here.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-N1G67WI4.png)
  2. **SCIM JSON Template:** Copy-paste the following JSON payload here.

```json
{
  "schemas": [
    "urn:scim:schemas:core:1.0"
  ],
  "userName": "{$parameters.scimusername}",
  "emails": {
    "value": "{$user.email}",
    "type": "work",
    "primary": true
   },

  "name": {
    "givenName": "{$user.firstname}",
    "familyName": "{$user.lastname}",
    "formatted": "{$user.display_name}"
  },
  "phoneNumbers": [
    {
      "primary": true,
      "value": "{$user.phone}"
    }
  ]
}
```
  3. **SCIM Bearer Token:** Copy the **Bearer Toke**n from the Scalefusion Dashboard and paste it here.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-II23WKE1.png)
  4. Next, click **Enable** and **Save** it.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-3IEREDUN.png)
6. Next, go to **Provisioning** and select the **Enable Provisioning** checkbox under **Workflow**.
7. **Uncheck** the “Create user, Delete user, and Update user” checkboxes under “Require admin approval before this action is performed”.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-NS37Y4PT.png)
8. Click **Save**.

## Step 2: Add Role & Map SCIM App to that Role

1. Navigate to **Users** > **Roles** and click **New Role**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-TKL1TQ7U.png)
2. Enter a name for this role and select the App created previously. Click **Save**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-RQ7BK26B.png)
3. Next, go to **Users** and click **New Mapping**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-76CSS6JH.png)
4. Enter a name for this mapping.
5. Under **Conditions**, select an element from the dropdown list, for example, **Department** equals <name of the department> whose users will be mapped to the SCIM app.
6. Under **Actions**, select **Set role** and select the SCIM app created previously for Scalefusion.
7. Click **Save**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-IPH3J6CD.png)
8. If this condition is met, then the users will be automatically synced to Scalefusion.

## Step 3: Sync Users & Groups

1. Navigate to **Users** and click **New User**. ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-9UFG4O28.png)
2. Enter the user's details, ensuring they match the conditions specified in the **Mapping**. For example,

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-ZMK11VGA.png)
3. All the users that match the mapping will be synced to the Scalefusion dashboard.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-TAA0UUUQ.png)
4. To sync group(s), navigate to **Users** > **Groups** and click **New Group**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-5L9EWDGV.png)
5. Once the group is created, navigate to **Applications** > the SCIM app you created previously.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-JEN0YBRD.png)
6. Go to **Rules** and click **Add Rule**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-W9FSLISS.png)
  1. Enter a name for this rule.
  2. Click the **plus sign** under Condition to add a condition in this rule.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1AW63N0Y.png)
    1. Select **Role** from the dropdown list, select **include**, and select the Role that you created previously for this SCIM app.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-XBEFKPX4.png)
  3. Under **Actions**, search for group and select **Set Groups in** <your group’s name>.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-55SMJG39.png)
  4. Next, select For each **role** with the value that matches **.***

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-QQJRC727.png)
  5. Click **Save**.
7. Next, go to **Parameters** and ensure that “**Configured by Admin**” is selected.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-Y0ZG6NLP.png)
8. Go to **Groups** on this page.
  1. Select “**Include in User Provisioning**” and click **Save**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-5DY4JI9A.png)

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-PAH3QPZK.png)
9. Click **More Action**s on the top right-hand side of the page and click “**Reapply entitlement mappings**”.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-92MPWJ5L.png)
10. Once this is done, you will be able to see the Group synced to the Scalefusion dashboard.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-S0O3P5CY.png)
11. The synced group(s) will also be visible in the User Groups section on the Scalefusion dashboard.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-HIHUSP9J.png)
12. Users who are part of this group will also be visible within the group.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-FSGJMCAT.png)

This completes the SCIM app configuration and mapping of users and groups to it. The group and its users will now sync to the Scalefusion dashboard. Once synced, the group and its users will appear in the Scalefusion dashboard.

- If individual users are provisioned, they will be listed under the **User Enrollment** section.
- When a group is provisioned, both the group and its associated users will appear under the **User Groups** section. The associated users will also be listed under the **User Enrollment** section.

## Important Points to Note

- The SCIM JSON payload must accurately map your identity attributes (email, phone, name) for Scalefusion to interpret correctly.
- Enabling only required provisioning actions (create, update, delete) reduces unintended side effects.
- Always **test with one user** first before bulk provisioning.
- If you make any changes to the existing application, you need to reapply the mappings by going to More Actions > **Reapply entitlement mappings.**