> ## Documentation Index
> Fetch the complete documentation index at: https://bruno-a6972042-mintlify-c74cb75a.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SCIM provisioning with Bruno

This guide will walk you through setting up SCIM (System for Cross-domain Identity Management) provisioning with Bruno using Okta SWA (Secure Web Authentication).

<Info>
  **Prerequisites**: Before configuring Okta, you must first enable SCIM provisioning in Bruno and generate an API key. Follow the [Enabling SCIM Provisioning](./overview#enabling-scim-provisioning) section in the overview page to complete this setup and save your API key for use in the steps below.
</Info>

## Create your Okta App

<Info>
  **Already have an Okta App for SSO?** If you previously set up a Bruno Okta application for [SAML SSO](../saml-sso/configure-saml-sso-with-okta), you can reuse it for SCIM provisioning. Skip to the [Configure your Okta App](#configure-your-okta-app) section to add provisioning to your existing application.
</Info>

1. As an Okta admin, navigate to **Applications** and click **Create App Integration**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=e45d203f94ecbb79d486c8f550f54861" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="2088" height="1180" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp" />

2. Select **SWA - Secure Web Authentication** and click **Next**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=a8a213560f8eac2b418dd0676243c27c" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1868" height="1066" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp" />

3. On the **Create SWA Integration** page, add the following values and click **Finish**:
   * **App name**: (Unique App Name - e.g. Bruno SCIM Integration)
   * **App's login page URL**: `https://license.usebruno.com/`

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=32e5f0d188b45ff710a2fd74a202a3c9" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1538" height="1218" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp" />

## Configure your Okta App

1. On your newly created application page, select the **General** tab
2. Under **App Settings**, select **Edit**, and check the **Provisioning** option **SCIM** and click **Save**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=85fe62f1ab9a2a11a61194d397d355c6" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1498" height="1630" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp" />

3. Return to your Okta app, select the **Provisioning** tab, under **SCIM Connection** select **Edit** and configure the following values:
   * **SCIM connector base URL**: `https://license.usebruno.com/scim/v2`
   * **Unique identifier field for users**: `email`
   * **Supported provisioning actions**: Check the following options:
     * `Import New Users and Profile Updates`
     * `Push New Users`
     * `Push Profile Updates`
     * `Push Groups`
   * **Authentication**: set to **HTTP Header**
   * Under **HTTP Header**, for **token**: add the generated API Key value from the [prerequisites step](./overview#enabling-scim-provisioning)

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=64f048271497d4ae86e7b844c7e623ab" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1970" height="1542" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp" />

4. Click **Test Connector Configuration**. If successful, a **Connector configured successfully** message dialogue appears.

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=a86b773ec0be419f9a892bc23a8af20a" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1972" height="1398" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp" />

5. Click **Save** to complete the Provisioning integration.

6. Under the **Provisioning** tab, select the **To Apps** setting, edit and enable the following options and click **Save**:
   * `Create Users`
   * `Update User Attributes`
   * `Deactivate Users`

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=3894983edf3b0ac235a9ca8eace2efd9" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1860" height="1620" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp" />

Your SCIM integration is now complete. You can now begin [assigning users to Bruno](#assign-people-and-groups-to-bruno-in-okta).

## Assign people and groups to Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

2. Select **Assign** and either **Assign to People** or **Assign to Groups** to provision Bruno license keys

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=8b750699ea823ba7e0b155b4d6d77b71" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1370" height="708" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp" />

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=3cde6dff8ac4aefbe0c1d464dc5ecc25" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1258" height="614" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp" />

3. Assigned Users will receive an email with their **License Key**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=eb376f388f5ed22e9cb75827d115743f" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1812" height="976" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp" />

## Deprovision users from Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=6f2ea2930b6abd37ac786b1c41be9abd" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1360" height="1050" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp" />

2. Remove the desired users or groups, their license key(s) will be deactivated and they will receive an email notification

<img src="https://mintcdn.com/bruno-a6972042-mintlify-c74cb75a/87QrT1ctTy9d6m_W/v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp?fit=max&auto=format&n=87QrT1ctTy9d6m_W&q=85&s=ec5d3457a344a7d9e1f5bf61d7ef9c13" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="897" height="461" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp" />

## Related Resources

For more information about configuring SCIM provisioning with Okta, refer to these Okta documentation resources:

* [Add SCIM provisioning to app integrations](https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_scim.htm) - Step-by-step guide for adding SCIM provisioning to Okta applications
* [SCIM 2.0 protocol overview](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-provision-scim-messages.htm) - Reference for SCIM 2.0 messages and provisioning operations
* [On-premises provisioning with SCIM](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-architecture.htm) - Architecture and setup for SCIM provisioning
* [Test SCIM connectors](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-test-scim-server.htm) - Guide for testing SCIM connectors and servers
* [Okta provisioning documentation](https://help.okta.com/en-us/content/topics/provisioning/provisioning.htm) - Comprehensive provisioning documentation and best practices
