Skip to main content

Integrations: Setting up Okta for SCIM Directory Sync

Follow this guide to setup Okta with the platform

Written by Andrew Banta

To get started you need to be able to log in to your platform account and your Okta account. To set up the integration you also need to have admin privileges assigned to your platform login.

Start by signing in to the platform and choosing "Company Settings" in the navigation menu. Choose "Integrations," "Add Integrations," then "Add" to the right of "Okta."

The Okta page displays the Base URL as well as the API Token (SCIM). You need both of these SCIM credentials to enable user import and the provisioning of features. Either copy and paste these to a safe place, or leave this window open to reference later.

Note: The API token can only be copied when it is first generated. Navigating away from this page will mask the API Token.

In another tab, or another browser window, sign into your Okta account. Under "Applications" there are 4 buttons, choose "Browse App Catalog" the second from the left.

On the "Browse App Integration Catalog" search for the following:

SCIM 1.1 Header Auth

Choose "SCIM 1.1 Header Auth" from the list of results.

When the SCIM 1.1 (Header Auth) page loads, click the blue "Add" button, located on the left under the SCIM logo.

On the General Settings page, you edit the Application label. Then choose the blue "Next" button in the lower-right. Next you will be taken to the "Sign-On Options" tab. You change any of these settings if would like to, but the default settings work fine. Scroll to the bottom and choose the blue "Done" button.

Choose the "Provisioning" tab, and then click "Configure API Integration".

Now you can paste the SCIM credentials from the Okta Integration page from the platform.

After you have successfully authenticated, check the "Enable" box to the right of the top three options for provisioning to app:

  • Create Users

  • Update User Attributes

  • Deactivate Users

Then click the blue "Save" button in the lower-right corner.

Click on "Push Groups" next. Choose a group in Okta and match it to the group in the platform. If you only need to do this once, choose "Save", if you have more than one group do them one at a time, but choose "Save & Add Another" to repeat the process.


Frequently asked questions

How can I resolve a provisioning credential error?

If you encounter the following screen:

Check to ensure you pasted the URL and API tokens to the correct fields. Check for accidental errors. If you're still getting an error when you test the API credentials, clear out the fields and paste them anew.

When I return to the Okta page in the platform why can't I copy the API Token?

If you navigate away from the page after the credentials are created, if you saved them to a secure location, you can still copy them from there. Otherwise choose "Reset API Token". This will allow you to securely connect Okta to the platform, but this won't erase any data.


Need help?

For assistance, use the online chat feature. On the web, select the question mark at the top-right corner of the page and then Chat with Us. On the mobile app, open the menu and then select Chat with Us.


Publish date: May 4, 2021

Last update: April 22, 2026

Did this answer your question?