> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usebruno.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SCIM provisioning with Bruno

This guide will walk you through setting up SCIM (System for Cross-domain Identity Management) provisioning with Bruno using Okta SWA (Secure Web Authentication).

<Info>
  **Prerequisites**: Before configuring Okta, you must first enable SCIM provisioning in Bruno and generate an API key. Follow the [Enabling SCIM Provisioning](./overview#enabling-scim-provisioning) section in the overview page to complete this setup and save your API key for use in the steps below.
</Info>

## Create your Okta App

<Info>
  **Already have an Okta App for SSO?** If you previously set up a Bruno Okta application for [SAML SSO](../saml-sso/configure-saml-sso-with-okta), you can reuse it for SCIM provisioning. Skip to the [Configure your Okta App](#configure-your-okta-app) section to add provisioning to your existing application.
</Info>

1. As an Okta admin, navigate to **Applications** and click **Create App Integration**

<img src="https://mintcdn.com/bruno-a6972042/uGT0Shya7KZFqFkD/images/screenshots/sso-scim-management/okta/okta-swa-1.webp?fit=max&auto=format&n=uGT0Shya7KZFqFkD&q=85&s=a0f06d117307b9fee6bed9e2e168c5d4" alt="License portal login" width="2088" height="1180" data-path="images/screenshots/sso-scim-management/okta/okta-swa-1.webp" />

2. Select **SWA - Secure Web Authentication** and click **Next**

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-2.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=325e9e2db204f486098e83c078f3e289" alt="License portal login" width="1868" height="1066" data-path="images/screenshots/sso-scim-management/okta/okta-swa-2.webp" />

3. On the **Create SWA Integration** page, add the following values and click **Finish**:
   * **App name**: (Unique App Name - e.g. Bruno SCIM Integration)
   * **App's login page URL**: `https://license.usebruno.com/`

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-3.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=095b062695e19b6439aa203462096060" alt="License portal login" width="1538" height="1218" data-path="images/screenshots/sso-scim-management/okta/okta-swa-3.webp" />

## Configure your Okta App

1. On your newly created application page, select the **General** tab
2. Under **App Settings**, select **Edit**, and check the **Provisioning** option **SCIM** and click **Save**

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-5.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=b5a1b3ece4044cae1d86d88f7688ff8a" alt="License portal login" width="1498" height="1630" data-path="images/screenshots/sso-scim-management/okta/okta-swa-5.webp" />

3. Return to your Okta app, select the **Provisioning** tab, under **SCIM Connection** select **Edit** and configure the following values:
   * **SCIM connector base URL**: `https://license.usebruno.com/scim/v2`
   * **Unique identifier field for users**: `email`
   * **Supported provisioning actions**: Check the following options:
     * `Import New Users and Profile Updates`
     * `Push New Users`
     * `Push Profile Updates`
     * `Push Groups`
   * **Authentication**: set to **HTTP Header**
   * Under **HTTP Header**, for **token**: add the generated API Key value from the [prerequisites step](./overview#enabling-scim-provisioning)

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-7.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=06390f9f98f2fe80039a04c069839555" alt="License portal login" width="1970" height="1542" data-path="images/screenshots/sso-scim-management/okta/okta-swa-7.webp" />

4. Click **Test Connector Configuration**. If successful, a **Connector configured successfully** message dialogue appears.

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-8.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=5a8ad1069423b51a2a7413bd9832f3e1" alt="License portal login" width="1972" height="1398" data-path="images/screenshots/sso-scim-management/okta/okta-swa-8.webp" />

5. Click **Save** to complete the Provisioning integration.

6. Under the **Provisioning** tab, select the **To Apps** setting, edit and enable the following options and click **Save**:
   * `Create Users`
   * `Update User Attributes`
   * `Deactivate Users`

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-9.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=6f52770d4bbeef32bf454bc89ba1746a" alt="License portal login" width="1860" height="1620" data-path="images/screenshots/sso-scim-management/okta/okta-swa-9.webp" />

Your SCIM integration is now complete. You can now begin [assigning users to Bruno](#assign-people-and-groups-to-bruno-in-okta).

## Assign people and groups to Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

2. Select **Assign** and either **Assign to People** or **Assign to Groups** to provision Bruno license keys

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-15.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=ed01ceb56aa0eb200705e0f77b6bf967" alt="License portal login" width="1370" height="708" data-path="images/screenshots/sso-scim-management/okta/okta-swa-15.webp" />

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-16.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=facd41463b01b01bcf35cc6f471f5baa" alt="License portal login" width="1258" height="614" data-path="images/screenshots/sso-scim-management/okta/okta-swa-16.webp" />

3. Assigned Users will receive an email with their **License Key**

<img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-12.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=2297e360ae5f7830ca306c10db53a426" alt="License portal login" width="1812" height="976" data-path="images/screenshots/sso-scim-management/okta/okta-swa-12.webp" />

## Deprovision users from Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab
   <img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-13.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=3c99ea6fdea888ce5f71259c3295989b" alt="License portal login" width="1360" height="1050" data-path="images/screenshots/sso-scim-management/okta/okta-swa-13.webp" />
2. Remove the desired users or groups, their license key(s) will be deactivated and they will receive an email notification
   <img src="https://mintcdn.com/bruno-a6972042/KbpwWkeN627E4ypz/images/screenshots/sso-scim-management/okta/okta-swa-14.webp?fit=max&auto=format&n=KbpwWkeN627E4ypz&q=85&s=4f2b767447bd7d30a36e9ea5b5cba757" alt="License portal login" width="897" height="461" data-path="images/screenshots/sso-scim-management/okta/okta-swa-14.webp" />

## Related Resources

For more information about configuring SCIM provisioning with Okta, refer to these Okta documentation resources:

* [Add SCIM provisioning to app integrations](https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_scim.htm) - Step-by-step guide for adding SCIM provisioning to Okta applications
* [SCIM 2.0 protocol overview](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-provision-scim-messages.htm) - Reference for SCIM 2.0 messages and provisioning operations
* [On-premises provisioning with SCIM](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-architecture.htm) - Architecture and setup for SCIM provisioning
* [Test SCIM connectors](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-test-scim-server.htm) - Guide for testing SCIM connectors and servers
* [Okta provisioning documentation](https://help.okta.com/en-us/content/topics/provisioning/provisioning.htm) - Comprehensive provisioning documentation and best practices
