SCIM Provisioning with Okta
Updated
by Lyndsay
If your organization uses Okta to manage your employees’ access to tools and services, you can take advantage of Okta’s “Provisioning” feature to automatically grant access to EasyLlama to your admin users and learners.
The integration between Okta and EasyLlama that enables this provisioning to occur is built around an industry-standard protocol known as SCIM (System for Cross-domain Identity Management). To learn more about how Okta works with SCIM, please see this article.
The remainder of this guide is focused on enabling you to configure both EasyLlama and Okta to get provisioning up and running for your organization.
Supported features
- Create admin users / learners
- Update admin users / learners attributes
- Deactivate admin users / learners
Step-by-step configuration instructions
1) Click “Applications” > “Applications” > “Browse App Catalog“
(If you already have EasyLlama as an application, click on it).
Search for “EasyLlama”.
Click “Add“
Click “Done“.
2) Click the “Provisioning” tab and click “Configure API Integration“
3) Next, click the checkbox “Enable API Integration“.
4) Under the “Provisioning” tab, your EasyLlama organization ID and click "Save".
Your EasyLlama organization ID will be provided by your customer success team.
5) Next, on the “Provisioning” tab click “To App” and click “Edit“
6) Check each box for EasyLlama’s supported provisioning actions:
- Create Users
- Update User Attributes
- Deactivate Users
Click "Save".
9) Next, click the tab for “Sign On” and click “Edit“
10) Select Email for the Application username format and click “save”
How to provision learners into EasyLlama
1) In Okta, go to Directory > People
2) Add a new user or select an existing one
3) Click "Assign Applications" and select the application you just installed, "EasyLlama SCIM".
4) A form will appear. You can also enter the "User Type" such as "admin", "learner" or both "admin, learner".
5) Click "Save".
6) Learners will be provisioned in your EasyLlama account and will be assigned training courses (if selected).
To automatically assign training courses when provisioning learners
You can assign courses to learners when they are provisioned through Okta SCIM for the first time (new learners only). To do this, follow these steps to add a training_tags column in the Okta profile editor:
1) After having installed the EasyLlama Okta app, go to Directory > Profile Editor
2) Click on "Add Attribute" and enter the following information:
- Display name: EasyLlama Training Tags
- Variable name: training_tags
- External name: training_tags
- External namespace: urn:ietf:params:scim:schemas:core:2.0:User
Then click "Save".
3) (optional) To map your core User fields to the EasyLlama app, click on "Mappings", then on "Okta User to EasyLlama" and map your user field to the EasyLlama training_tags. Click "Save".
4) When provisioning a new user in Okta and assigning them the EasyLlama app, you will have the opportunity to enter the EasyLlama training tags to automatically assign specific courses to learners. For example, you can enter the hp-self-select code to assign the Harassment Prevention Training Self-Select. Since these tags were previously only used for file uploads/feeds, they are located under File upload information in the dashboard. You can find instructions here to locate them: Adding Learners using the File Upload Method -> How to get the Training Codes/Learning Journey codes.
5) That's it! New learners should appear in your EasyLlama dashboard with trainings assigned.
Note
For admin users: first names, last names and email addresses are required
For learners: first names and last names are required
