How to: Manage User Lifecycle with Okta (SCIM)

This guide explains how to set up System for Cross-domain Identity Management (SCIM) with Okta for your Hellotracks account. SCIM automates the provisioning and deprovisioning of user accounts, ensuring that user data is synchronized between Okta and Hellotracks, streamlining your user management processes.

Key Features of Okta SCIM Integration

Once configured, Okta SCIM provides the following automated user management capabilities:

• Create Users: Users assigned to the Hellotracks application in Okta are automatically added as members to your organization in Hellotracks.
• Deactivate Users: Deactivating a user or disabling their access to the application through Okta will logically delete the user in Hellotracks, removing their access.
• Update User Attributes: Changes made to a user's profile (attributes) in Okta will be automatically pushed and synchronized to their corresponding profile in Hellotracks.

Requirements

• SCIM-based user provisioning is available to Business customers on platform plans.
• This setup process must be carried out by an Administrator.

How to Find Your Hellotracks API-KEY

To set up SCIM, you will need your Hellotracks API-KEY. This API-KEY will be used as the API-TOKEN when configuring SCIM in the Okta Console.

Step 1: Go to Settings and click API & Integrations.

Step 2: Make sure the Enable API for your company account checkbox is ticked. Click Show credentials and example to reveal your API-Key (secret). Copy this key.

How to Configure Okta SCIM

Now that you have your API-KEY, proceed with the Okta configuration:

Step 1: In the Okta Admin Console, go to Applications and click Browse App Catalog.

Step 2: Search for Hellotracks.

Step 3: Click Add Integration.

Step 4: Click Done.

Step 5: Configure Provisioning Settings.

• Go to the Provisioning tab.
• Check the Enable API integration box.
• Enter your Hellotracks API-KEY (the one you just copied) into the API TOKEN field.
• Click Test API Credentials to ensure the connection is successful.

Step 6: Set up Provisioning to App.

• On the same Provisioning tab, inside Settings menu, select the To App option.
• Look for and enable the following options:
  • Create Users. Important: Ensure that the default username used to create accounts in Okta is set to Email.
  • Update User Attributes
  • Deactivate Users

Step 7: Click Save.

Troubleshooting

If you have questions or difficulties with your Hellotracks/Okta SCIM integration, please contact support via support@hellotracks.com.