PingOne SCIM Integration Guide for Scalefusion

This guide walks you through setting up the SCIM integration with Scalefusion and provisioning users and groups via PingOne.

Pre-requisite

1. SCIM Connector should be configured on Scalefusion Dashboard.

Step 1: Configure SCIM in the Ping Identity Admin Console

1. Create a Workforce Environment
   Navigate to Environments → Create Environment → Create a Workforce Solution.

   

2. Name the Environment
   Enter a Name and Description for the workforce environment. Click Save.

   

3. Assign SCIM to the Environment
   Once created, click Manage Environment.

   

4. Enable PingOne Provisioning
   Under Additional Capabilities, select PingOne Provisioning.

   

5. Create a SCIM Connection
   Click the + icon → New Connection → select your Identity Store → choose SCIM.

   

6. This will open Create a New Connection on the side panel. Here, search for SCIM, select it and click Next
   

   

7. Name the Connection and Continue
   Provide a name for the new connection and click Next.

   

8. Configure Authentication

   1. Paste the Base URL (SCIM API Endpoint).

   2. Select OAuth2 Bearer Token as Authentication Method and paste the Bearer Token from the Scalefusion dashboard.

   3. Test the connection and click Next.

      

9. Configure Preference
   On Configure Preferences, click Save.
   

   

10. Now, toggle on the following (as shown below)
    

    

11. Create a Provisioning Rule
    Under the Rules tab, click the + icon next to Provisioning, and select New Rule.

    

12. Name and Create the Rule
    Provide a name for the rule and click Create Rule.

    

13. Under Configuration tab, select the connection you have created from the list of Available Connections
    

    

14. Assign the Rule to the SCIM Connection
    Assign the created rule to your SCIM connection.

    

Step 2: Add Populations

1. Navigate to:
   Directory > Populations

2. Click on the + sign to add new population

3. Enter the population name and click Save.
   

   

4. The new population will appear in the list.

Note:
Populations are mandatory for user existence in PingOne.

Step 3: Add Users

1. Navigate to:
   Directory > Users

2. Click on the + sign to add user

3. Enter user details:

   • Given Name

   • Family Name

   • Username

   • Email

4. Click Save.

Important:

• Users are assigned by default to the Default population unless a custom population is created.

• Each user must belong to exactly one population.

4. The new user appears in the user list for further actions.
   

   

Step 4: Add Groups

1. Navigate to:
   Directory > Groups

2. Click on the + sign to create group

3. Assign a population to limit group membership.
   

   

Step 5: Add Users to Groups

1. Navigate to:
   Directory → Groups → Select Group → Users tab

2. Click Add Individually,
   

   

3. Select users, and click Save.
   

   

   
   

Step 6: Provision Users and Groups to Scalefusion

a) Provision Users via User Filter

1. Navigate to:
   Integrations → Provisioning → Rules -> Click 3 dots next to your rule → Edit User Filter
   

   

2. Assign by population name and click Save.
   

   

b) Provision Users via Groups

1. Navigate to:
   Integrations → Provisioning → Rules -> Click 3 dots next to your rule → Edit Group Provisioning
   

   

   
   

2. Select the group and click Save.
   

   

The group and its users will now sync to the Scalefusion dashboard. Once synced, the group and its users will appear in the Scalefusion dashboard.

• If individual users are provisioned, they will be listed under the User Enrollment section.

• When a group is provisioned, both the group and its associated users will appear under the User Groups section. The associated users will also be listed under the User Enrollment section.