How to: Manage User Lifecycle with Okta (SCIM)

This guide explains how to set up System for Cross-domain Identity Management (SCIM) with Okta for your Hellotracks account. SCIM automates the provisioning and deprovisioning of user accounts, ensuring that user data is synchronized between Okta and Hellotracks, streamlining your user management processes.

Key Features of Okta SCIM Integration

Once configured, Okta SCIM provides the following automated user management capabilities:

Create Users: Users assigned to the Hellotracks application in Okta are automatically added as members to your organization in Hellotracks.
Deactivate Users: Deactivating a user or disabling their access to the application through Okta will logically delete the user in Hellotracks, removing their access.
Update User Attributes: Changes made to a user's profile (attributes) in Okta will be automatically pushed and synchronized to their corresponding profile in Hellotracks.

Requirements

SCIM-based user provisioning is available to Business customers on platform plans.
This setup process must be carried out by an Administrator.

How to Find Your Hellotracks API-KEY

To set up SCIM, you will need your Hellotracks API-KEY. This API-KEY will be used as the API-TOKEN when configuring SCIM in the Okta Console.

Step 1: Go to Settings and click API & Integrations.

Step 2: Make sure the "Enable API for your company account" checkbox is ticked. Click "Show credentials and example" to reveal your API-Key (secret). Copy this key.

How to Configure Okta SCIM

Now that you have your API-KEY, proceed with the Okta configuration:

Step 1: In the Okta Admin Console, go to Applications and click "Browse App Catalog."

Step 2: Search for Hellotracks.

Step 3: Click "Add Integration."

Step 4: Click "Done."

Step 5: Configure Provisioning Settings.

Go to the Provisioning tab.
Check the "Enable API integration" box.
Enter your Hellotracks API-KEY (the one you just copied) into the API TOKEN field.
Click "Test API Credentials" to ensure the connection is successful.

Step 6: Set up Provisioning to App.

On the same Provisioning tab, inside Settings menu, select the To App option.
Look for and enable the following options:
- Create Users. Important: Ensure that the default username used to create accounts in Okta is set to Email.
- Update User Attributes
- Deactivate Users

Step 7: Click Save.

You have successfully configured Okta SCIM for Hellotracks. Your user lifecycle management is now automated!

Troubleshooting

If you have questions or difficulties with your Hellotracks/Okta SCIM integration, please contact support via support@h ellotracks.com.